[ 36.942247][ T26] audit: type=1800 audit(1554601911.124:27): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.964495][ T26] audit: type=1800 audit(1554601911.124:28): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.846212][ T26] audit: type=1800 audit(1554601912.074:29): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.866763][ T26] audit: type=1800 audit(1554601912.104:30): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. 2019/04/07 01:52:05 fuzzer started 2019/04/07 01:52:08 dialing manager at 10.128.0.26:34543 2019/04/07 01:52:08 syscalls: 2408 2019/04/07 01:52:08 code coverage: enabled 2019/04/07 01:52:08 comparison tracing: enabled 2019/04/07 01:52:08 extra coverage: extra coverage is not supported by the kernel 2019/04/07 01:52:08 setuid sandbox: enabled 2019/04/07 01:52:08 namespace sandbox: enabled 2019/04/07 01:52:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/07 01:52:08 fault injection: enabled 2019/04/07 01:52:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/07 01:52:08 net packet injection: enabled 2019/04/07 01:52:08 net device setup: enabled 01:54:11 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)) syzkaller login: [ 177.376601][ T7852] IPVS: ftp: loaded support on port[0] = 21 01:54:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 177.479334][ T7852] chnl_net:caif_netlink_parms(): no params data found [ 177.550588][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.566244][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.574433][ T7852] device bridge_slave_0 entered promiscuous mode [ 177.607541][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.614645][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.624721][ T7852] device bridge_slave_1 entered promiscuous mode [ 177.650678][ T7855] IPVS: ftp: loaded support on port[0] = 21 [ 177.658857][ T7852] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.672687][ T7852] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:54:12 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0x80785659, 0x0) [ 177.720896][ T7852] team0: Port device team_slave_0 added [ 177.729195][ T7852] team0: Port device team_slave_1 added [ 177.801121][ T7852] device hsr_slave_0 entered promiscuous mode [ 177.866458][ T7852] device hsr_slave_1 entered promiscuous mode 01:54:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) [ 177.945261][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.952496][ T7852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.960062][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.967162][ T7852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.976887][ T7857] IPVS: ftp: loaded support on port[0] = 21 [ 178.070207][ T7855] chnl_net:caif_netlink_parms(): no params data found [ 178.155967][ T7861] IPVS: ftp: loaded support on port[0] = 21 [ 178.199986][ T7852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.207620][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.214660][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.223208][ T7855] device bridge_slave_0 entered promiscuous mode [ 178.233142][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.241219][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state 01:54:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x11, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffff82) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) [ 178.249320][ T7855] device bridge_slave_1 entered promiscuous mode [ 178.335409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.348282][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.368324][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.381605][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 178.400818][ T7855] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.430690][ T7852] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.440655][ T7866] IPVS: ftp: loaded support on port[0] = 21 [ 178.447919][ T7855] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.478791][ T7857] chnl_net:caif_netlink_parms(): no params data found [ 178.508545][ T7855] team0: Port device team_slave_0 added [ 178.515544][ T7855] team0: Port device team_slave_1 added [ 178.585757][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.594656][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.605525][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.612635][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.624519][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 01:54:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x8494, 0xfffffffffffffffd, 0x6, 0x20}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x7c, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e24, @rand_addr=0x30}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x2a}, 0x7fffffff}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000180)=0xc) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x76f3}]) [ 178.633221][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.644646][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.652555][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.666881][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.675501][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.798964][ T7855] device hsr_slave_0 entered promiscuous mode [ 178.836414][ T7855] device hsr_slave_1 entered promiscuous mode [ 178.896746][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.905122][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.913506][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.921786][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.930421][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.949001][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.956108][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.963830][ T7857] device bridge_slave_0 entered promiscuous mode [ 178.971295][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.978533][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.986093][ T7857] device bridge_slave_1 entered promiscuous mode [ 179.006846][ T7861] chnl_net:caif_netlink_parms(): no params data found [ 179.039394][ T7857] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.048551][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.057854][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.074828][ T7869] IPVS: ftp: loaded support on port[0] = 21 [ 179.100742][ T7857] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.140039][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.148452][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.184295][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 179.194632][ T7857] team0: Port device team_slave_0 added [ 179.201340][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.209143][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.218030][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.225572][ T7861] device bridge_slave_0 entered promiscuous mode [ 179.235419][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.242832][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.250629][ T7861] device bridge_slave_1 entered promiscuous mode [ 179.263705][ T7857] team0: Port device team_slave_1 added [ 179.275908][ T7852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.345246][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.352405][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.360275][ T7866] device bridge_slave_0 entered promiscuous mode [ 179.369216][ T7861] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.387483][ T7861] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.406105][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.415136][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.428143][ T7866] device bridge_slave_1 entered promiscuous mode [ 179.459509][ T7857] device hsr_slave_0 entered promiscuous mode [ 179.516515][ T7857] device hsr_slave_1 entered promiscuous mode [ 179.577089][ T7861] team0: Port device team_slave_0 added [ 179.583949][ T7861] team0: Port device team_slave_1 added 01:54:13 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000380)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 179.640259][ T7866] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.684388][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.693720][ T7866] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.777715][ T7861] device hsr_slave_0 entered promiscuous mode [ 179.816448][ T7861] device hsr_slave_1 entered promiscuous mode 01:54:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000180)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000040), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) io_setup(0x40, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 179.921396][ T7866] team0: Port device team_slave_0 added [ 179.935140][ T7866] team0: Port device team_slave_1 added [ 179.979545][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.987579][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.997049][ T7855] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.037695][ T7866] device hsr_slave_0 entered promiscuous mode [ 180.076318][ T7866] device hsr_slave_1 entered promiscuous mode [ 180.140827][ T7869] chnl_net:caif_netlink_parms(): no params data found [ 180.168764][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.181744][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 01:54:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x2008007800, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20024, &(0x7f0000000080)=ANY=[@ANYBLOB=',context=s']) 01:54:14 executing program 0: r0 = socket$kcm(0xa, 0x840000000000001, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x9}, 0xffffffffffffff0d) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 180.196993][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.205418][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.212546][ T7860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.228037][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.300100][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.311825][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.320613][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.327693][ T7862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.335649][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.348552][ T7857] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.368631][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.376110][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.383877][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.392802][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.401489][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.408581][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.416183][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.424508][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.433133][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.440195][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.447765][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.456098][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.476970][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.485427][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.494346][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.502966][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.511531][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.520218][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.528475][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.542104][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state 01:54:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x2008007800, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20024, &(0x7f0000000080)=ANY=[@ANYBLOB=',context=s']) [ 180.549867][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.558517][ T7869] device bridge_slave_0 entered promiscuous mode [ 180.570548][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.578772][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.594521][ T7869] device bridge_slave_1 entered promiscuous mode [ 180.614814][ T7869] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.634716][ T7861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.641798][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.649879][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.659667][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.668133][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.688469][ T7869] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.699386][ T7855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 01:54:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) [ 180.715909][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 01:54:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000006c0)=[@increfs, @clear_death], 0x0, 0x0, 0x0}) [ 180.776183][ T7869] team0: Port device team_slave_0 added [ 180.792648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.812946][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.832166][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.850236][ T7869] team0: Port device team_slave_1 added [ 180.860176][ T7855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.871074][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.881210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.888940][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.897839][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.905977][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.914292][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.934952][ T7861] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.977026][ T7857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.993338][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.002736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.022005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.032816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.039925][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.051063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.051597][ C1] hrtimer: interrupt took 42008 ns [ 181.059632][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 01:54:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 181.129265][ T7869] device hsr_slave_0 entered promiscuous mode [ 181.166716][ T7869] device hsr_slave_1 entered promiscuous mode [ 181.237803][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.251713][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.260244][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.270083][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.277162][ T7860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.284602][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.293724][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.301445][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.311536][ T7866] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.320621][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.335707][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.365604][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.374531][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.383641][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.390770][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.399451][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.408231][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.420550][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.427656][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.435043][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.443808][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.452262][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.460641][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.469129][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.477580][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.485683][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.494046][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.502317][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.510865][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.518752][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.540489][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.550996][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.559545][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.568217][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.577827][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 01:54:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 181.630781][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.640130][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.662930][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.672739][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.688854][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.698699][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.717025][ T7866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.743382][ T7861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.769387][ T7869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.800386][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.816946][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.824614][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.843409][ T7869] 8021q: adding VLAN 0 to HW filter on device team0 01:54:16 executing program 3: [ 181.868970][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.882006][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.903910][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.911033][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.961052][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.970479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.992718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.007914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.014962][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.026831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.035117][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.044277][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.053124][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.061426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.069958][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.078336][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.086628][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.095510][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.106089][ T7869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.118042][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.125978][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.135165][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.156623][ T7869] 8021q: adding VLAN 0 to HW filter on device batadv0 01:54:17 executing program 4: 01:54:17 executing program 0: 01:54:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:17 executing program 2: 01:54:17 executing program 3: 01:54:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x8494, 0xfffffffffffffffd, 0x6, 0x20}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x7c, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e24, @rand_addr=0x30}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x2a}, 0x7fffffff}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000180)=0xc) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x76f3}]) 01:54:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='\x10', 0x1) 01:54:17 executing program 3: 01:54:17 executing program 0: 01:54:17 executing program 4: 01:54:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:17 executing program 2: 01:54:17 executing program 3: 01:54:17 executing program 5: 01:54:17 executing program 0: 01:54:17 executing program 2: 01:54:17 executing program 4: 01:54:17 executing program 3: 01:54:17 executing program 5: 01:54:17 executing program 0: 01:54:17 executing program 4: 01:54:17 executing program 2: 01:54:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:17 executing program 3: 01:54:17 executing program 4: 01:54:17 executing program 5: 01:54:17 executing program 2: 01:54:17 executing program 0: 01:54:17 executing program 3: 01:54:17 executing program 0: 01:54:17 executing program 4: 01:54:17 executing program 5: 01:54:17 executing program 2: 01:54:18 executing program 5: 01:54:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:18 executing program 4: 01:54:18 executing program 0: 01:54:18 executing program 3: 01:54:18 executing program 2: 01:54:18 executing program 4: 01:54:18 executing program 3: 01:54:18 executing program 0: 01:54:18 executing program 5: 01:54:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:18 executing program 4: 01:54:18 executing program 3: 01:54:18 executing program 2: 01:54:18 executing program 0: 01:54:18 executing program 5: 01:54:18 executing program 4: 01:54:18 executing program 0: 01:54:18 executing program 3: 01:54:18 executing program 2: 01:54:18 executing program 4: 01:54:18 executing program 3: 01:54:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:18 executing program 5: 01:54:18 executing program 0: 01:54:18 executing program 2: 01:54:18 executing program 4: 01:54:18 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0xe782, 0x6, 0x0, 0x6}, 'syz0\x00', 0x2}) write$P9_RFSYNC(r1, &(0x7f0000000200)={0x7}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @remote}, {0x0, @dev}, 0x5e, {0x2, 0x4e20, @empty}, 'team_slave_0\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1280) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0xb) 01:54:18 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x401, 0x4, 0x2, 0x1564, 0x80}, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}}, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/148, 0x94, 0x10000, 0x0, 0x0) 01:54:18 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 01:54:18 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0xe782, 0x6, 0xfff, 0x6}, 'syz0\x00', 0x2}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000200)={0x7}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) dup2(r0, r1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000100)) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0xb) 01:54:18 executing program 2: 01:54:18 executing program 4: [ 184.648121][ T8086] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.690201][ T8089] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8089 [ 184.700482][ T8089] caller is sk_mc_loop+0x1d/0x210 [ 184.705638][ T8089] CPU: 1 PID: 8089 Comm: syz-executor.5 Not tainted 5.1.0-rc3-next-20190405 #19 [ 184.714671][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.716420][ T8086] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/8086 [ 184.724768][ T8089] Call Trace: [ 184.724795][ T8089] dump_stack+0x172/0x1f0 [ 184.724816][ T8089] __this_cpu_preempt_check+0x246/0x270 [ 184.724831][ T8089] sk_mc_loop+0x1d/0x210 [ 184.724864][ T8089] ip_mc_output+0x2ef/0xf70 [ 184.734246][ T8086] caller is ip6_finish_output+0x335/0xdc0 [ 184.737488][ T8089] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 184.737506][ T8089] ? ip_append_data.part.0+0x170/0x170 [ 184.737519][ T8089] ? retint_kernel+0x2d/0x2d [ 184.737537][ T8089] ip_local_out+0xc4/0x1b0 [ 184.781250][ T8089] ip_send_skb+0x42/0xf0 [ 184.785490][ T8089] udp_send_skb.isra.0+0x6b2/0x1180 [ 184.790685][ T8089] udp_push_pending_frames+0x5c/0xf0 [ 184.795981][ T8089] udp_sendpage+0x30c/0x480 [ 184.800483][ T8089] ? udp_sendmsg+0x2820/0x2820 [ 184.805254][ T8089] ? retint_kernel+0x2d/0x2d [ 184.809837][ T8089] ? mark_held_locks+0xa4/0xf0 [ 184.814602][ T8089] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 184.820049][ T8089] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 184.825534][ T8089] ? udp_sendmsg+0x2820/0x2820 [ 184.830288][ T8089] inet_sendpage+0x16b/0x630 [ 184.834881][ T8089] kernel_sendpage+0x95/0xf0 [ 184.839490][ T8089] ? inet_sendmsg+0x5e0/0x5e0 [ 184.844156][ T8089] sock_sendpage+0x8b/0xc0 [ 184.848561][ T8089] pipe_to_sendpage+0x299/0x370 [ 184.853396][ T8089] ? kernel_sendpage+0xf0/0xf0 [ 184.858144][ T8089] ? direct_splice_actor+0x1a0/0x1a0 [ 184.863416][ T8089] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 184.869642][ T8089] ? anon_pipe_buf_release+0x1c6/0x270 [ 184.875094][ T8089] __splice_from_pipe+0x395/0x7d0 [ 184.880121][ T8089] ? direct_splice_actor+0x1a0/0x1a0 [ 184.885407][ T8089] ? direct_splice_actor+0x1a0/0x1a0 [ 184.890676][ T8089] splice_from_pipe+0x108/0x170 [ 184.895513][ T8089] ? splice_shrink_spd+0xd0/0xd0 [ 184.900481][ T8089] ? apparmor_file_permission+0x25/0x30 [ 184.906012][ T8089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.912253][ T8089] ? security_file_permission+0x94/0x380 [ 184.917886][ T8089] generic_splice_sendpage+0x3c/0x50 [ 184.923155][ T8089] ? splice_from_pipe+0x170/0x170 [ 184.928163][ T8089] do_splice+0x70a/0x13c0 [ 184.932484][ T8089] ? opipe_prep.part.0+0x2d0/0x2d0 [ 184.937595][ T8089] ? __fget_light+0x1a9/0x230 [ 184.942271][ T8089] __x64_sys_splice+0x2c6/0x330 [ 184.947116][ T8089] do_syscall_64+0x103/0x610 [ 184.951694][ T8089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.957583][ T8089] RIP: 0033:0x4582b9 [ 184.961467][ T8089] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.981053][ T8089] RSP: 002b:00007fe223972c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 184.989455][ T8089] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 184.997414][ T8089] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 185.005383][ T8089] RBP: 000000000073bfa0 R08: 0000000000810003 R09: 000000000000000b [ 185.013356][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2239736d4 [ 185.021321][ T8089] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 185.029348][ T8086] CPU: 0 PID: 8086 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 185.038358][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.046038][ T8091] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/8091 [ 185.048399][ T8086] Call Trace: [ 185.048418][ T8086] dump_stack+0x172/0x1f0 [ 185.048438][ T8086] __this_cpu_preempt_check+0x246/0x270 [ 185.048464][ T8086] ip6_finish_output+0x335/0xdc0 [ 185.048484][ T8086] ip6_output+0x235/0x7f0 [ 185.048501][ T8086] ? ip6_finish_output+0xdc0/0xdc0 [ 185.048519][ T8086] ? ip6_fragment+0x3980/0x3980 [ 185.048540][ T8086] ip6_xmit+0xe41/0x20c0 [ 185.048593][ T8086] ? ip6_finish_output2+0x2550/0x2550 [ 185.048608][ T8086] ? mark_held_locks+0xf0/0xf0 [ 185.048629][ T8086] ? ip6_setup_cork+0x1870/0x1870 [ 185.060142][ T8091] caller is sk_mc_loop+0x1d/0x210 [ 185.061166][ T8086] inet6_csk_xmit+0x2fb/0x5d0 [ 185.061194][ T8086] ? inet6_csk_update_pmtu+0x190/0x190 [ 185.061222][ T8086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.130932][ T8086] ? csum_ipv6_magic+0x20/0x80 [ 185.135704][ T8086] __tcp_transmit_skb+0x1a32/0x3750 [ 185.140916][ T8086] ? __tcp_select_window+0x8b0/0x8b0 [ 185.146204][ T8086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.152460][ T8086] ? tcp_fastopen_no_cookie+0xe0/0x190 [ 185.157922][ T8086] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 185.164160][ T8086] tcp_connect+0x1e47/0x4280 [ 185.168763][ T8086] ? tcp_push_one+0x110/0x110 [ 185.173437][ T8086] ? secure_tcpv6_ts_off+0x24f/0x360 [ 185.178747][ T8086] ? secure_dccpv6_sequence_number+0x280/0x280 [ 185.184898][ T8086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.191135][ T8086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.197375][ T8086] ? prandom_u32_state+0x13/0x180 [ 185.202404][ T8086] tcp_v6_connect+0x150b/0x20a0 [ 185.207252][ T8086] ? tcp_sendmsg_locked+0x2170/0x37f0 [ 185.212622][ T8086] ? tcp_v6_conn_request+0x2b0/0x2b0 [ 185.217902][ T8086] ? __switch_to_asm+0x34/0x70 [ 185.222661][ T8086] ? __switch_to_asm+0x40/0x70 [ 185.227476][ T8086] ? find_held_lock+0x35/0x130 [ 185.232241][ T8086] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 185.237875][ T8086] __inet_stream_connect+0x83f/0xea0 [ 185.243152][ T8086] ? tcp_v6_conn_request+0x2b0/0x2b0 [ 185.248445][ T8086] ? __inet_stream_connect+0x83f/0xea0 [ 185.253914][ T8086] ? inet_dgram_connect+0x2e0/0x2e0 [ 185.259102][ T8086] ? tcp_sendmsg_locked+0x2170/0x37f0 [ 185.264481][ T8086] ? rcu_read_lock_sched_held+0x110/0x130 [ 185.270220][ T8086] ? kmem_cache_alloc_trace+0x354/0x760 [ 185.275756][ T8086] ? __lock_acquire+0x548/0x3fb0 [ 185.280703][ T8086] tcp_sendmsg_locked+0x231f/0x37f0 [ 185.285895][ T8086] ? mark_held_locks+0xf0/0xf0 [ 185.290651][ T8086] ? mark_held_locks+0xa4/0xf0 [ 185.295450][ T8086] ? tcp_sendpage+0x60/0x60 [ 185.299976][ T8086] ? lock_sock_nested+0x9a/0x120 [ 185.304903][ T8086] ? trace_hardirqs_on+0x67/0x230 [ 185.309945][ T8086] ? lock_sock_nested+0x9a/0x120 [ 185.314877][ T8086] ? __local_bh_enable_ip+0x15a/0x270 [ 185.320251][ T8086] tcp_sendmsg+0x30/0x50 [ 185.324490][ T8086] inet_sendmsg+0x147/0x5e0 [ 185.328989][ T8086] ? ipip_gro_receive+0x100/0x100 [ 185.334010][ T8086] sock_sendmsg+0xdd/0x130 [ 185.338426][ T8086] __sys_sendto+0x262/0x380 [ 185.342930][ T8086] ? __ia32_sys_getpeername+0xb0/0xb0 [ 185.348319][ T8086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 185.354574][ T8086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 185.360029][ T8086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 185.365479][ T8086] ? do_syscall_64+0x26/0x610 [ 185.370161][ T8086] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 185.376223][ T8086] __x64_sys_sendto+0xe1/0x1a0 [ 185.380996][ T8086] do_syscall_64+0x103/0x610 [ 185.385642][ T8086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 185.391526][ T8086] RIP: 0033:0x4582b9 [ 185.395421][ T8086] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.415010][ T8086] RSP: 002b:00007f7c1fa39c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 185.423425][ T8086] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 185.431412][ T8086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 185.439398][ T8086] RBP: 000000000073bf00 R08: 00000000208d4fe4 R09: 000000000000001c [ 185.447364][ T8086] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f7c1fa3a6d4 [ 185.455334][ T8086] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff [ 185.463381][ T8091] CPU: 1 PID: 8091 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 185.472411][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.482489][ T8091] Call Trace: [ 185.485778][ T8091] dump_stack+0x172/0x1f0 [ 185.490115][ T8091] __this_cpu_preempt_check+0x246/0x270 [ 185.495648][ T8091] sk_mc_loop+0x1d/0x210 [ 185.499883][ T8091] ip_mc_output+0x2ef/0xf70 [ 185.504389][ T8091] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 185.509512][ T8091] ? ip_append_data.part.0+0x170/0x170 [ 185.509540][ T8091] ip_local_out+0xc4/0x1b0 [ 185.509555][ T8091] ip_send_skb+0x42/0xf0 [ 185.509567][ T8091] udp_send_skb.isra.0+0x6b2/0x1180 [ 185.509596][ T8091] udp_push_pending_frames+0x5c/0xf0 [ 185.509614][ T8091] udp_sendpage+0x30c/0x480 [ 185.509628][ T8091] ? udp_sendmsg+0x2820/0x2820 [ 185.519645][ T8091] ? lockdep_hardirqs_on+0x418/0x5d0 [ 185.519658][ T8091] ? retint_kernel+0x2d/0x2d [ 185.519672][ T8091] ? trace_hardirqs_on_caller+0x6a/0x220 [ 185.519685][ T8091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 185.519703][ T8091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 185.569906][ T8091] ? udp_sendmsg+0x2820/0x2820 [ 185.574673][ T8091] inet_sendpage+0x16b/0x630 [ 185.574694][ T8091] kernel_sendpage+0x95/0xf0 [ 185.574706][ T8091] ? inet_sendmsg+0x5e0/0x5e0 [ 185.574724][ T8091] sock_sendpage+0x8b/0xc0 [ 185.574744][ T8091] pipe_to_sendpage+0x299/0x370 [ 185.574763][ T8091] ? kernel_sendpage+0xf0/0xf0 [ 185.602535][ T8091] ? direct_splice_actor+0x1a0/0x1a0 [ 185.607843][ T8091] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 185.607863][ T8091] ? anon_pipe_buf_release+0x1c6/0x270 [ 185.615189][ T8099] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/8099 [ 185.619554][ T8091] __splice_from_pipe+0x395/0x7d0 [ 185.619579][ T8091] ? direct_splice_actor+0x1a0/0x1a0 [ 185.619611][ T8091] ? direct_splice_actor+0x1a0/0x1a0 [ 185.619624][ T8091] splice_from_pipe+0x108/0x170 [ 185.619663][ T8091] ? splice_shrink_spd+0xd0/0xd0 [ 185.619694][ T8091] ? apparmor_file_permission+0x25/0x30 [ 185.619724][ T8091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.629158][ T8099] caller is sk_mc_loop+0x1d/0x210 [ 185.634093][ T8091] ? security_file_permission+0x94/0x380 [ 185.634110][ T8091] generic_splice_sendpage+0x3c/0x50 [ 185.634122][ T8091] ? splice_from_pipe+0x170/0x170 [ 185.634134][ T8091] do_splice+0x70a/0x13c0 [ 185.634166][ T8091] ? opipe_prep.part.0+0x2d0/0x2d0 [ 185.696920][ T8091] ? __fget_light+0x1a9/0x230 [ 185.701628][ T8091] __x64_sys_splice+0x2c6/0x330 [ 185.706494][ T8091] do_syscall_64+0x103/0x610 [ 185.711097][ T8091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 185.716996][ T8091] RIP: 0033:0x4582b9 [ 185.720913][ T8091] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.740522][ T8091] RSP: 002b:00007f75e5fd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 185.748927][ T8091] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 185.756883][ T8091] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 185.764854][ T8091] RBP: 000000000073bfa0 R08: 0000000000810003 R09: 000000000000000b [ 185.772824][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75e5fd96d4 [ 185.780787][ T8091] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 185.788809][ T8099] CPU: 0 PID: 8099 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 185.797819][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.801941][ T8086] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/8086 [ 185.807856][ T8099] Call Trace: [ 185.807874][ T8099] dump_stack+0x172/0x1f0 [ 185.807891][ T8099] __this_cpu_preempt_check+0x246/0x270 [ 185.807904][ T8099] sk_mc_loop+0x1d/0x210 [ 185.807928][ T8099] ip_mc_output+0x2ef/0xf70 [ 185.807945][ T8099] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 185.817382][ T8086] caller is ip6_finish_output+0x335/0xdc0 [ 185.820605][ T8099] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 185.855377][ T8099] ? ip_append_data.part.0+0x170/0x170 [ 185.860826][ T8099] ? retint_kernel+0x2d/0x2d [ 185.865406][ T8099] ip_local_out+0xc4/0x1b0 [ 185.869811][ T8099] ip_send_skb+0x42/0xf0 [ 185.874053][ T8099] udp_send_skb.isra.0+0x6b2/0x1180 [ 185.879242][ T8099] udp_push_pending_frames+0x5c/0xf0 [ 185.884518][ T8099] udp_sendpage+0x30c/0x480 [ 185.889010][ T8099] ? udp_sendmsg+0x2820/0x2820 [ 185.893757][ T8099] ? mark_held_locks+0xa4/0xf0 [ 185.898519][ T8099] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 185.903965][ T8099] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 185.909408][ T8099] ? lockdep_hardirqs_on+0x418/0x5d0 [ 185.914675][ T8099] ? retint_kernel+0x2d/0x2d [ 185.919261][ T8099] ? trace_hardirqs_on_caller+0x6a/0x220 [ 185.924912][ T8099] ? udp_sendmsg+0x2820/0x2820 [ 185.929673][ T8099] inet_sendpage+0x16b/0x630 [ 185.934263][ T8099] kernel_sendpage+0x95/0xf0 [ 185.938833][ T8099] ? inet_sendmsg+0x5e0/0x5e0 [ 185.943506][ T8099] sock_sendpage+0x8b/0xc0 [ 185.947911][ T8099] pipe_to_sendpage+0x299/0x370 [ 185.952757][ T8099] ? kernel_sendpage+0xf0/0xf0 [ 185.957527][ T8099] ? direct_splice_actor+0x1a0/0x1a0 [ 185.962804][ T8099] ? generic_pipe_buf_get+0x120/0x120 [ 185.968163][ T8099] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 185.974412][ T8099] ? anon_pipe_buf_release+0x1c6/0x270 [ 185.979891][ T8099] __splice_from_pipe+0x395/0x7d0 [ 185.984917][ T8099] ? direct_splice_actor+0x1a0/0x1a0 [ 185.990213][ T8099] ? direct_splice_actor+0x1a0/0x1a0 [ 185.995490][ T8099] splice_from_pipe+0x108/0x170 [ 186.000347][ T8099] ? splice_shrink_spd+0xd0/0xd0 [ 186.005299][ T8099] ? apparmor_file_permission+0x25/0x30 [ 186.010867][ T8099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.017109][ T8099] ? security_file_permission+0x94/0x380 [ 186.022919][ T8099] generic_splice_sendpage+0x3c/0x50 [ 186.028213][ T8099] ? splice_from_pipe+0x170/0x170 [ 186.033234][ T8099] do_splice+0x70a/0x13c0 [ 186.037593][ T8099] ? opipe_prep.part.0+0x2d0/0x2d0 [ 186.042726][ T8099] ? __fget_light+0x1a9/0x230 [ 186.047416][ T8099] __x64_sys_splice+0x2c6/0x330 [ 186.052278][ T8099] do_syscall_64+0x103/0x610 [ 186.056887][ T8099] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 186.062773][ T8099] RIP: 0033:0x4582b9 [ 186.066669][ T8099] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 186.086285][ T8099] RSP: 002b:00007f75e5f75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 186.094712][ T8099] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 186.102677][ T8099] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000008 [ 186.110644][ T8099] RBP: 000000000073c180 R08: 0000000000810003 R09: 000000000000000b [ 186.118613][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75e5f766d4 [ 186.126585][ T8099] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 186.134586][ T8086] CPU: 1 PID: 8086 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 186.143611][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.153693][ T8086] Call Trace: [ 186.156997][ T8086] dump_stack+0x172/0x1f0 [ 186.161360][ T8086] __this_cpu_preempt_check+0x246/0x270 [ 186.166957][ T8086] ip6_finish_output+0x335/0xdc0 [ 186.171905][ T8086] ip6_output+0x235/0x7f0 [ 186.176242][ T8086] ? ip6_finish_output+0xdc0/0xdc0 [ 186.181372][ T8086] ? ip6_fragment+0x3980/0x3980 [ 186.186255][ T8086] ip6_xmit+0xe41/0x20c0 [ 186.190517][ T8086] ? ip6_finish_output2+0x2550/0x2550 [ 186.195898][ T8086] ? mark_held_locks+0xf0/0xf0 [ 186.200675][ T8086] ? ip6_setup_cork+0x1870/0x1870 [ 186.205763][ T8086] inet6_csk_xmit+0x2fb/0x5d0 [ 186.210447][ T8086] ? inet6_csk_update_pmtu+0x190/0x190 [ 186.215910][ T8086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.222163][ T8086] ? csum_ipv6_magic+0x20/0x80 [ 186.226946][ T8086] __tcp_transmit_skb+0x1a32/0x3750 [ 186.232154][ T8086] ? memcpy+0x46/0x50 [ 186.236154][ T8086] ? __tcp_select_window+0x8b0/0x8b0 [ 186.241457][ T8086] ? tcp_rbtree_insert+0x188/0x200 [ 186.246578][ T8086] tcp_send_synack+0x4b0/0x15b0 [ 186.251457][ T8086] ? tcp_send_active_reset+0x8e0/0x8e0 [ 186.256926][ T8086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.263169][ T8086] ? tcp_sync_mss+0x2ee/0xa30 [ 186.267862][ T8086] tcp_rcv_state_process+0x225d/0x4d93 [ 186.267895][ T8086] ? tcp_finish_connect+0x510/0x510 [ 186.278527][ T8086] ? __release_sock+0xca/0x3a0 [ 186.278542][ T8086] ? find_held_lock+0x35/0x130 [ 186.278559][ T8086] ? mark_held_locks+0xa4/0xf0 01:54:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='\xd4\xb7\xe7\v%Z\\\xa3\xfa{\x13\x81vm', 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x1040800) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xfee9) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast1}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$key(r3, 0x0, 0x4801) flock(r1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e21, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x4e22, @multicast1}, 'bridge_slave_0\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000680)="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", 0xffd) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x18}, @mcast2, @dev={0xfe, 0x80, [], 0x21}, 0x1f, 0x4, 0x7, 0x0, 0x800, 0x84600000, r4}) flock(0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 01:54:20 executing program 5: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0xe782, 0x6, 0x0, 0x6}, 'syz0\x00', 0x2}) write$P9_RFSYNC(r1, &(0x7f0000000200)={0x7}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @remote}, {0x0, @dev}, 0x5e, {0x2, 0x4e20, @empty}, 'team_slave_0\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1280) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0xb) 01:54:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 186.278574][ T8086] ? __local_bh_enable_ip+0x15a/0x270 [ 186.278598][ T8086] ? _raw_spin_unlock_bh+0x31/0x40 [ 186.303348][ T8086] ? __local_bh_enable_ip+0x15a/0x270 [ 186.308771][ T8086] tcp_v6_do_rcv+0x7da/0x12c0 [ 186.313462][ T8086] ? tcp_v6_do_rcv+0x7da/0x12c0 [ 186.318339][ T8086] __release_sock+0x12e/0x3a0 [ 186.323037][ T8086] release_sock+0x59/0x1c0 [ 186.327472][ T8086] __inet_stream_connect+0x59f/0xea0 [ 186.332775][ T8086] ? inet_dgram_connect+0x2e0/0x2e0 [ 186.338085][ T8086] ? tcp_sendmsg_locked+0x2170/0x37f0 [ 186.343467][ T8086] ? do_wait_intr_irq+0x2b0/0x2b0 [ 186.348502][ T8086] ? __lock_acquire+0x548/0x3fb0 [ 186.353458][ T8086] tcp_sendmsg_locked+0x231f/0x37f0 [ 186.358660][ T8086] ? mark_held_locks+0xf0/0xf0 [ 186.363423][ T8086] ? mark_held_locks+0xa4/0xf0 [ 186.368213][ T8086] ? tcp_sendpage+0x60/0x60 [ 186.372712][ T8086] ? lock_sock_nested+0x9a/0x120 [ 186.377646][ T8086] ? trace_hardirqs_on+0x67/0x230 [ 186.382669][ T8086] ? lock_sock_nested+0x9a/0x120 [ 186.387604][ T8086] ? __local_bh_enable_ip+0x15a/0x270 [ 186.392974][ T8086] tcp_sendmsg+0x30/0x50 [ 186.397237][ T8086] inet_sendmsg+0x147/0x5e0 [ 186.401734][ T8086] ? ipip_gro_receive+0x100/0x100 [ 186.406759][ T8086] sock_sendmsg+0xdd/0x130 [ 186.411184][ T8086] __sys_sendto+0x262/0x380 [ 186.415695][ T8086] ? __ia32_sys_getpeername+0xb0/0xb0 [ 186.421087][ T8086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 186.427360][ T8086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.432816][ T8086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.438267][ T8086] ? do_syscall_64+0x26/0x610 [ 186.442949][ T8086] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 186.449017][ T8086] __x64_sys_sendto+0xe1/0x1a0 [ 186.453781][ T8086] do_syscall_64+0x103/0x610 [ 186.458370][ T8086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 186.464260][ T8086] RIP: 0033:0x4582b9 [ 186.468153][ T8086] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 186.487747][ T8086] RSP: 002b:00007f7c1fa39c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 01:54:20 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFSYNC(r1, &(0x7f0000000200)={0x7}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0x0) [ 186.496150][ T8086] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 186.504119][ T8086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 186.512088][ T8086] RBP: 000000000073bf00 R08: 00000000208d4fe4 R09: 000000000000001c [ 186.520073][ T8086] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f7c1fa3a6d4 [ 186.528074][ T8086] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff [ 186.674803][ T8111] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.5/8111 [ 186.685515][ T8111] caller is sk_mc_loop+0x1d/0x210 [ 186.690701][ T8111] CPU: 1 PID: 8111 Comm: syz-executor.5 Not tainted 5.1.0-rc3-next-20190405 #19 [ 186.700496][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.710555][ T8111] Call Trace: [ 186.713867][ T8111] dump_stack+0x172/0x1f0 [ 186.718208][ T8111] __this_cpu_preempt_check+0x246/0x270 [ 186.718227][ T8111] sk_mc_loop+0x1d/0x210 [ 186.718245][ T8111] ip_mc_output+0x2ef/0xf70 [ 186.718266][ T8111] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 186.718284][ T8111] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.718313][ T8111] ? ip_append_data.part.0+0x170/0x170 [ 186.718330][ T8111] ? retint_kernel+0x2d/0x2d [ 186.718351][ T8111] ip_local_out+0xc4/0x1b0 [ 186.718369][ T8111] ip_send_skb+0x42/0xf0 [ 186.718392][ T8111] udp_send_skb.isra.0+0x6b2/0x1180 [ 186.718416][ T8111] udp_push_pending_frames+0x5c/0xf0 [ 186.728262][ T8111] udp_sendpage+0x30c/0x480 [ 186.728281][ T8111] ? udp_sendmsg+0x2820/0x2820 [ 186.728296][ T8111] ? mark_held_locks+0xa4/0xf0 [ 186.728322][ T8111] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.728338][ T8111] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.728354][ T8111] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.728370][ T8111] ? lockdep_hardirqs_on+0x418/0x5d0 [ 186.728383][ T8111] ? retint_kernel+0x2d/0x2d [ 186.728400][ T8111] ? trace_hardirqs_on_caller+0x6a/0x220 [ 186.728419][ T8111] ? udp_sendmsg+0x2820/0x2820 [ 186.728436][ T8111] inet_sendpage+0x16b/0x630 [ 186.728458][ T8111] kernel_sendpage+0x95/0xf0 [ 186.728470][ T8111] ? inet_sendmsg+0x5e0/0x5e0 [ 186.728491][ T8111] sock_sendpage+0x8b/0xc0 [ 186.743539][ T8111] pipe_to_sendpage+0x299/0x370 [ 186.743556][ T8111] ? kernel_sendpage+0xf0/0xf0 [ 186.743572][ T8111] ? direct_splice_actor+0x1a0/0x1a0 [ 186.743594][ T8111] ? anon_pipe_buf_release+0x1c6/0x270 [ 186.743614][ T8111] __splice_from_pipe+0x395/0x7d0 [ 186.743629][ T8111] ? direct_splice_actor+0x1a0/0x1a0 [ 186.743677][ T8111] ? direct_splice_actor+0x1a0/0x1a0 [ 186.743692][ T8111] splice_from_pipe+0x108/0x170 [ 186.743712][ T8111] ? splice_shrink_spd+0xd0/0xd0 [ 186.753752][ T8111] ? apparmor_file_permission+0x25/0x30 [ 186.753768][ T8111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.753786][ T8111] ? security_file_permission+0x94/0x380 [ 186.753810][ T8111] ? __fget+0x47c/0x550 [ 186.753828][ T8111] generic_splice_sendpage+0x3c/0x50 [ 186.753842][ T8111] ? splice_from_pipe+0x170/0x170 [ 186.753855][ T8111] do_splice+0x70a/0x13c0 [ 186.753876][ T8111] ? opipe_prep.part.0+0x2d0/0x2d0 [ 186.762509][ T8111] ? __fget_light+0x1a9/0x230 [ 186.762530][ T8111] __x64_sys_splice+0x2c6/0x330 [ 186.762554][ T8111] do_syscall_64+0x103/0x610 [ 186.762573][ T8111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 186.762585][ T8111] RIP: 0033:0x4582b9 [ 186.762600][ T8111] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 186.762609][ T8111] RSP: 002b:00007fe223972c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 186.762624][ T8111] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 186.762632][ T8111] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 186.762640][ T8111] RBP: 000000000073bfa0 R08: 0000000000810003 R09: 000000000000000b [ 186.762650][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2239736d4 [ 186.762659][ T8111] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 186.773854][ T8100] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/8100 [ 186.815935][ T8116] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/8116 [ 186.818127][ T8100] caller is ip6_finish_output+0x335/0xdc0 [ 186.822906][ T8116] caller is sk_mc_loop+0x1d/0x210 [ 186.828516][ T8100] CPU: 1 PID: 8100 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 186.828525][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.828530][ T8100] Call Trace: [ 186.828559][ T8100] dump_stack+0x172/0x1f0 [ 187.085817][ T8100] __this_cpu_preempt_check+0x246/0x270 [ 187.091376][ T8100] ip6_finish_output+0x335/0xdc0 [ 187.096333][ T8100] ip6_output+0x235/0x7f0 [ 187.100688][ T8100] ? ip6_finish_output+0xdc0/0xdc0 [ 187.105801][ T8100] ? ip6_fragment+0x3980/0x3980 [ 187.110661][ T8100] ip6_xmit+0xe41/0x20c0 [ 187.114921][ T8100] ? ip6_finish_output2+0x2550/0x2550 [ 187.120298][ T8100] ? mark_held_locks+0xf0/0xf0 [ 187.125089][ T8100] ? ip6_setup_cork+0x1870/0x1870 [ 187.130140][ T8100] inet6_csk_xmit+0x2fb/0x5d0 [ 187.134819][ T8100] ? inet6_csk_update_pmtu+0x190/0x190 [ 187.140290][ T8100] ? csum_ipv6_magic+0x20/0x80 [ 187.145080][ T8100] __tcp_transmit_skb+0x1a32/0x3750 [ 187.150292][ T8100] ? __tcp_select_window+0x8b0/0x8b0 [ 187.155593][ T8100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.161837][ T8100] ? tcp_fastopen_no_cookie+0xe0/0x190 [ 187.167311][ T8100] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 187.173587][ T8100] tcp_connect+0x1e47/0x4280 [ 187.178188][ T8100] ? tcp_push_one+0x110/0x110 [ 187.182868][ T8100] ? secure_tcpv6_ts_off+0x24f/0x360 [ 187.188156][ T8100] ? secure_dccpv6_sequence_number+0x280/0x280 [ 187.194323][ T8100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.200568][ T8100] ? prandom_u32_state+0x13/0x180 [ 187.205638][ T8100] tcp_v6_connect+0x150b/0x20a0 [ 187.210502][ T8100] ? tcp_sendmsg_locked+0x2170/0x37f0 [ 187.215880][ T8100] ? tcp_v6_conn_request+0x2b0/0x2b0 [ 187.221210][ T8100] ? __switch_to_asm+0x34/0x70 [ 187.225968][ T8100] ? __switch_to_asm+0x40/0x70 [ 187.230823][ T8100] ? find_held_lock+0x35/0x130 [ 187.235590][ T8100] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 187.241230][ T8100] __inet_stream_connect+0x83f/0xea0 [ 187.246512][ T8100] ? tcp_v6_conn_request+0x2b0/0x2b0 [ 187.251803][ T8100] ? __inet_stream_connect+0x83f/0xea0 [ 187.257284][ T8100] ? inet_dgram_connect+0x2e0/0x2e0 [ 187.262494][ T8100] ? tcp_sendmsg_locked+0x2170/0x37f0 [ 187.267865][ T8100] ? rcu_read_lock_sched_held+0x110/0x130 [ 187.273598][ T8100] ? kmem_cache_alloc_trace+0x354/0x760 [ 187.279144][ T8100] ? __lock_acquire+0x548/0x3fb0 [ 187.284098][ T8100] tcp_sendmsg_locked+0x231f/0x37f0 [ 187.289319][ T8100] ? mark_held_locks+0xf0/0xf0 [ 187.294095][ T8100] ? mark_held_locks+0xa4/0xf0 [ 187.298869][ T8100] ? tcp_sendpage+0x60/0x60 [ 187.303378][ T8100] ? lock_sock_nested+0x9a/0x120 [ 187.308327][ T8100] ? trace_hardirqs_on+0x67/0x230 [ 187.313351][ T8100] ? lock_sock_nested+0x9a/0x120 [ 187.318326][ T8100] ? __local_bh_enable_ip+0x15a/0x270 [ 187.323722][ T8100] tcp_sendmsg+0x30/0x50 [ 187.327968][ T8100] inet_sendmsg+0x147/0x5e0 [ 187.332470][ T8100] ? ipip_gro_receive+0x100/0x100 [ 187.337501][ T8100] sock_sendmsg+0xdd/0x130 [ 187.341923][ T8100] __sys_sendto+0x262/0x380 [ 187.346451][ T8100] ? __ia32_sys_getpeername+0xb0/0xb0 [ 187.351861][ T8100] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 187.358117][ T8100] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 187.363573][ T8100] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 187.369044][ T8100] ? do_syscall_64+0x26/0x610 [ 187.373727][ T8100] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 187.379799][ T8100] __x64_sys_sendto+0xe1/0x1a0 [ 187.384567][ T8100] do_syscall_64+0x103/0x610 [ 187.389163][ T8100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 187.395082][ T8100] RIP: 0033:0x4582b9 [ 187.398979][ T8100] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.418596][ T8100] RSP: 002b:00007f7c1fa18c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.427018][ T8100] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 187.434985][ T8100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 187.442986][ T8100] RBP: 000000000073bfa0 R08: 00000000208d4fe4 R09: 000000000000001c [ 187.450970][ T8100] R10: 0000000020000008 R11: 0000000000000246 R12: 00007f7c1fa196d4 [ 187.458940][ T8100] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff [ 187.466942][ T8116] CPU: 0 PID: 8116 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 01:54:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:21 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0xe782, 0x6, 0xfff, 0x6}, 'syz0\x00', 0x2}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000200)={0x7}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) dup2(r0, r1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000100)) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0xb) [ 187.475968][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.475980][ T8116] Call Trace: [ 187.489342][ T8116] dump_stack+0x172/0x1f0 [ 187.493703][ T8116] __this_cpu_preempt_check+0x246/0x270 [ 187.499265][ T8116] sk_mc_loop+0x1d/0x210 [ 187.503522][ T8116] ip_mc_output+0x2ef/0xf70 [ 187.508053][ T8116] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 187.513164][ T8116] ? retint_kernel+0x2d/0x2d [ 187.517776][ T8116] ? ip_append_data.part.0+0x170/0x170 [ 187.523248][ T8116] ip_local_out+0xc4/0x1b0 [ 187.527699][ T8116] ip_send_skb+0x42/0xf0 [ 187.531943][ T8116] udp_send_skb.isra.0+0x6b2/0x1180 [ 187.531970][ T8116] udp_push_pending_frames+0x5c/0xf0 [ 187.531990][ T8116] udp_sendpage+0x30c/0x480 [ 187.542481][ T8116] ? udp_sendmsg+0x2820/0x2820 [ 187.551733][ T8116] ? retint_kernel+0x2d/0x2d [ 187.556360][ T8116] ? udp_sendmsg+0x2820/0x2820 [ 187.561141][ T8116] ? inet_sendpage+0x173/0x630 [ 187.561157][ T8116] ? udp_sendmsg+0x2820/0x2820 [ 187.561179][ T8116] inet_sendpage+0x16b/0x630 [ 187.570691][ T8116] kernel_sendpage+0x95/0xf0 [ 187.570704][ T8116] ? inet_sendmsg+0x5e0/0x5e0 [ 187.570725][ T8116] sock_sendpage+0x8b/0xc0 [ 187.579925][ T8116] pipe_to_sendpage+0x299/0x370 [ 187.593844][ T8116] ? kernel_sendpage+0xf0/0xf0 [ 187.593861][ T8116] ? direct_splice_actor+0x1a0/0x1a0 [ 187.593882][ T8116] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 187.593910][ T8116] ? anon_pipe_buf_release+0x1c6/0x270 [ 187.593933][ T8116] __splice_from_pipe+0x395/0x7d0 [ 187.593950][ T8116] ? direct_splice_actor+0x1a0/0x1a0 [ 187.593972][ T8116] ? direct_splice_actor+0x1a0/0x1a0 [ 187.593993][ T8116] splice_from_pipe+0x108/0x170 [ 187.604089][ T8116] ? splice_shrink_spd+0xd0/0xd0 [ 187.604114][ T8116] ? apparmor_file_permission+0x25/0x30 [ 187.604130][ T8116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.604153][ T8116] ? security_file_permission+0x94/0x380 [ 187.604178][ T8116] ? __sanitizer_cov_trace_const_cmp4+0x11/0x20 [ 187.652929][ T8116] generic_splice_sendpage+0x3c/0x50 [ 187.652945][ T8116] ? splice_from_pipe+0x170/0x170 [ 187.652961][ T8116] do_splice+0x70a/0x13c0 [ 187.652987][ T8116] ? opipe_prep.part.0+0x2d0/0x2d0 [ 187.653009][ T8116] ? __fget_light+0x1a9/0x230 [ 187.689245][ T8116] __x64_sys_splice+0x2c6/0x330 [ 187.694134][ T8116] do_syscall_64+0x103/0x610 [ 187.697660][ T8127] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/8127 [ 187.698731][ T8116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 187.698744][ T8116] RIP: 0033:0x4582b9 [ 187.698759][ T8116] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.698768][ T8116] RSP: 002b:00007f9d2d33fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 187.698783][ T8116] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 187.698791][ T8116] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 187.698801][ T8116] RBP: 000000000073bfa0 R08: 0000000000810003 R09: 0000000000000000 [ 187.698810][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9d2d3406d4 [ 187.698818][ T8116] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 187.789498][ T8127] caller is sk_mc_loop+0x1d/0x210 [ 187.794652][ T8127] CPU: 1 PID: 8127 Comm: syz-executor.0 Not tainted 5.1.0-rc3-next-20190405 #19 [ 187.803672][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.813729][ T8127] Call Trace: [ 187.813751][ T8127] dump_stack+0x172/0x1f0 [ 187.813775][ T8127] __this_cpu_preempt_check+0x246/0x270 [ 187.813792][ T8127] sk_mc_loop+0x1d/0x210 [ 187.813809][ T8127] ip_mc_output+0x2ef/0xf70 [ 187.813829][ T8127] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 187.813850][ T8127] ? ip_append_data.part.0+0x170/0x170 [ 187.813870][ T8127] ? retint_kernel+0x2d/0x2d [ 187.813889][ T8127] ip_local_out+0xc4/0x1b0 [ 187.813909][ T8127] ip_send_skb+0x42/0xf0 [ 187.846309][ T8127] udp_send_skb.isra.0+0x6b2/0x1180 [ 187.846337][ T8127] udp_push_pending_frames+0x5c/0xf0 [ 187.846355][ T8127] udp_sendpage+0x30c/0x480 [ 187.846398][ T8127] ? udp_sendmsg+0x2820/0x2820 [ 187.846412][ T8127] ? lockdep_hardirqs_on+0x418/0x5d0 [ 187.846424][ T8127] ? retint_kernel+0x2d/0x2d [ 187.846439][ T8127] ? trace_hardirqs_on_caller+0x6a/0x220 [ 187.846458][ T8127] ? mark_held_locks+0xa4/0xf0 [ 187.846490][ T8127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 187.855496][ T8127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 187.855511][ T8127] ? udp_sendmsg+0x2820/0x2820 [ 187.855526][ T8127] inet_sendpage+0x16b/0x630 [ 187.855549][ T8127] kernel_sendpage+0x95/0xf0 [ 187.855561][ T8127] ? inet_sendmsg+0x5e0/0x5e0 [ 187.855579][ T8127] sock_sendpage+0x8b/0xc0 [ 187.855600][ T8127] pipe_to_sendpage+0x299/0x370 [ 187.855616][ T8127] ? kernel_sendpage+0xf0/0xf0 [ 187.855636][ T8127] ? direct_splice_actor+0x1a0/0x1a0 [ 187.933705][ T8127] ? __sanitizer_cov_trace_pc+0x3f/0x50 [ 187.933725][ T8127] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 187.933742][ T8127] ? anon_pipe_buf_release+0x1c6/0x270 [ 187.933761][ T8127] __splice_from_pipe+0x395/0x7d0 [ 187.933777][ T8127] ? direct_splice_actor+0x1a0/0x1a0 [ 187.933800][ T8127] ? direct_splice_actor+0x1a0/0x1a0 [ 187.933815][ T8127] splice_from_pipe+0x108/0x170 [ 187.933833][ T8127] ? splice_shrink_spd+0xd0/0xd0 [ 187.933856][ T8127] ? apparmor_file_permission+0x25/0x30 [ 187.933877][ T8127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.943471][ T8127] ? security_file_permission+0x94/0x380 [ 187.943486][ T8127] ? write_comp_data+0x1e/0x70 [ 187.943506][ T8127] generic_splice_sendpage+0x3c/0x50 [ 187.943521][ T8127] ? splice_from_pipe+0x170/0x170 [ 187.943538][ T8127] do_splice+0x70a/0x13c0 [ 187.943563][ T8127] ? opipe_prep.part.0+0x2d0/0x2d0 [ 187.943590][ T8127] ? __fget_light+0x1a9/0x230 [ 188.037817][ T8127] __x64_sys_splice+0x2c6/0x330 [ 188.042676][ T8127] do_syscall_64+0x103/0x610 [ 188.047268][ T8127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 188.053158][ T8127] RIP: 0033:0x4582b9 [ 188.057048][ T8127] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:54:22 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x401, 0x4, 0x2, 0x1564, 0x80}, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}}, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/148, 0x94, 0x10000, 0x0, 0x0) [ 188.076667][ T8127] RSP: 002b:00007f75e5fd8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 188.085076][ T8127] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 188.093040][ T8127] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 188.101012][ T8127] RBP: 000000000073bfa0 R08: 0000000000810003 R09: 000000000000000b [ 188.108976][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75e5fd96d4 [ 188.116946][ T8127] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff [ 188.135817][ T8136] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/8136 [ 188.145197][ T8136] caller is sk_mc_loop+0x1d/0x210 [ 188.150321][ T8136] CPU: 1 PID: 8136 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 188.159351][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.169407][ T8136] Call Trace: [ 188.172726][ T8136] dump_stack+0x172/0x1f0 [ 188.177089][ T8136] __this_cpu_preempt_check+0x246/0x270 [ 188.182647][ T8136] sk_mc_loop+0x1d/0x210 [ 188.186902][ T8136] ip_mc_output+0x2ef/0xf70 [ 188.191433][ T8136] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 188.196552][ T8136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.202799][ T8136] ? prandom_u32_state+0x13/0x180 [ 188.207832][ T8136] ? ip_append_data.part.0+0x170/0x170 [ 188.213312][ T8136] ? __ip_make_skb+0xf15/0x1820 [ 188.218176][ T8136] ip_local_out+0xc4/0x1b0 [ 188.222603][ T8136] ip_send_skb+0x42/0xf0 [ 188.226855][ T8136] udp_send_skb.isra.0+0x6b2/0x1180 [ 188.232077][ T8136] udp_push_pending_frames+0x5c/0xf0 [ 188.237377][ T8136] udp_sendpage+0x30c/0x480 [ 188.241895][ T8136] ? udp_sendmsg+0x2820/0x2820 [ 188.246679][ T8136] ? udp_sendmsg+0x2820/0x2820 [ 188.251457][ T8136] inet_sendpage+0x16b/0x630 [ 188.256061][ T8136] kernel_sendpage+0x95/0xf0 [ 188.260662][ T8136] ? inet_sendmsg+0x5e0/0x5e0 [ 188.265347][ T8136] sock_sendpage+0x8b/0xc0 [ 188.269770][ T8136] ? pipe_lock+0x6e/0x80 [ 188.274026][ T8136] pipe_to_sendpage+0x299/0x370 [ 188.278889][ T8136] ? kernel_sendpage+0xf0/0xf0 [ 188.283666][ T8136] ? direct_splice_actor+0x1a0/0x1a0 [ 188.288963][ T8136] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 188.295211][ T8136] ? anon_pipe_buf_release+0x1c6/0x270 [ 188.300685][ T8136] __splice_from_pipe+0x395/0x7d0 [ 188.305713][ T8136] ? direct_splice_actor+0x1a0/0x1a0 [ 188.311013][ T8136] ? direct_splice_actor+0x1a0/0x1a0 [ 188.316320][ T8136] splice_from_pipe+0x108/0x170 [ 188.321188][ T8136] ? splice_shrink_spd+0xd0/0xd0 [ 188.326141][ T8136] ? apparmor_file_permission+0x25/0x30 [ 188.331697][ T8136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.337947][ T8136] ? security_file_permission+0x94/0x380 [ 188.343632][ T8136] generic_splice_sendpage+0x3c/0x50 [ 188.348922][ T8136] ? splice_from_pipe+0x170/0x170 [ 188.353958][ T8136] do_splice+0x70a/0x13c0 [ 188.358311][ T8136] ? opipe_prep.part.0+0x2d0/0x2d0 [ 188.363431][ T8136] ? __fget_light+0x1a9/0x230 [ 188.368120][ T8136] __x64_sys_splice+0x2c6/0x330 [ 188.372987][ T8136] do_syscall_64+0x103/0x610 [ 188.377601][ T8136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 188.383497][ T8136] RIP: 0033:0x4582b9 [ 188.387403][ T8136] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.407011][ T8136] RSP: 002b:00007f9d2d2bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 188.415426][ T8136] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 188.423400][ T8136] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000008 01:54:22 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='\xd4\xb7\xe7\v%Z\\\xa3\xfa{\x13\x81vm', 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x1040800) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xfee9) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast1}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$key(r3, 0x0, 0x4801) flock(r1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e21, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x4e22, @multicast1}, 'bridge_slave_0\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000680)="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", 0xffd) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x18}, @mcast2, @dev={0xfe, 0x80, [], 0x21}, 0x1f, 0x4, 0x7, 0x0, 0x800, 0x84600000, r4}) flock(0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 188.431373][ T8136] RBP: 000000000073c220 R08: 0000000000810003 R09: 0000000000000000 [ 188.439343][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9d2d2bc6d4 [ 188.447340][ T8136] R13: 00000000004c70e6 R14: 00000000004dc0e0 R15: 00000000ffffffff 01:54:22 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='\xd4\xb7\xe7\v%Z\\\xa3\xfa{\x13\x81vm', 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x1040800) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xfee9) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast1}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$key(r3, 0x0, 0x4801) flock(r1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e21, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x4e22, @multicast1}, 'bridge_slave_0\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000680)="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", 0xffd) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x18}, @mcast2, @dev={0xfe, 0x80, [], 0x21}, 0x1f, 0x4, 0x7, 0x0, 0x800, 0x84600000, r4}) flock(0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 01:54:22 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x0, 0x0) memfd_create(0x0, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x1040800) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xfee9) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast1}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$key(r2, 0x0, 0x4801) flock(r0, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000300)={{0x2, 0x4e21, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x0, @multicast1}, 'bridge_slave_0\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000680)="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", 0xffd) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x18}, @mcast2, @dev={0xfe, 0x80, [], 0x21}, 0x1f, 0x4, 0x7, 0x0, 0x800, 0x84600000, r3}) flock(0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) 01:54:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:22 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0xe782, 0x6, 0xfff}, 'syz0\x00', 0x2}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) dup2(r0, r1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @remote}, {0x306, @dev={[], 0xc}}, 0x5e, {0x2, 0x4e20, @empty}, 'team_slave_0\x00'}) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0xb) 01:54:23 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='\xd4\xb7\xe7\v%Z\\\xa3\xfa{\x13\x81vm', 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x1040800) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xfee9) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast1}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$key(r3, 0x0, 0x4801) flock(r1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e21, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x4e22, @multicast1}, 'bridge_slave_0\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000680)="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", 0xffd) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x18}, @mcast2, @dev={0xfe, 0x80, [], 0x21}, 0x1f, 0x4, 0x7, 0x0, 0x800, 0x84600000, r4}) flock(0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 01:54:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x0, 0x40000, 0xfff) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64], @ANYRESDEC=0x0, @ANYPTR64, @ANYRESOCT], 0x4, 0x0) accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) 01:54:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000340)) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x0, 0x0, 0x0) 01:54:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) dup2(0xffffffffffffffff, r2) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x1, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 01:54:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, 0xffffffffffffffff) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 189.250752][ T8184] IPVS: ftp: loaded support on port[0] = 21 01:54:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() getpriority(0x0, r0) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001300), 0x40000a2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) 01:54:23 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uhid\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='\xd4\xb7\xe7\v%Z\\\xa3\xfa{\x13\x81vm', 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x1040800) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0xfee9) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast1}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendmsg$key(r3, 0x0, 0x4801) flock(r1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e21, @broadcast}, {0x0, @remote}, 0x4, {0x2, 0x4e22, @multicast1}, 'bridge_slave_0\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000680)="2ae030ec66da494c0e51679a1f917cb76ed176bd36cea9e49d2fb4662d337f019752eb98789d2341e6b3e3d1005499c162b681b37f987138dfb72e7a7138b0f2409c518d9a257ef0bab0691c57ed4936e4eabcd36bad4ad43df28bcc6856b819bb46c74bec15bd3eba2f9c47a5deb10fca5e3dc8295b53c38cbdf7cefe4e06bec202077654a746ded48eaa96ec4a5c783d3ff8da041a248be9f86839d3d440860e22790dd8024e463cb04d54831c088e43e6e1865a78fad49f644e103ee1f985698d45a12beb4c70c1f9aabc62b013c5317ef85492bb2c1330d8541f9d95391ca6302fc6bf97cab88a2b72781441f37de4b6db96a90300fc8eb435a27fc5d941af6054a5dab49e55cc242e1acf20a7db6372fd3062afd8c3d49684535a9fe00219bc321667fdf06dd4f098184b91b3c22bc6f3d096341df0227c301540ae485f08517a658549a8701ba3a8447e2c33270ec2972b220d01f33955e8f082c39167230f9626244840c19a7808991e49f7c16d8877b1cf49b89d8205c444a7066298aa50fae1dfdcf18ac1a5fa1d64999b908b46d3f7d2b89b873b70fe18eda89b045812813ea5fe7c24c8de9ed080d4477c66e6d584376f44133730fa6d695651787d47397cf11aaf5daa17de3eeecba7d5daf6e268a91baf1750848d47a95e275e8de36536fa1534013ed61ddb83715496dd1c938d1e475fe37a29c64c28c4480c63a194a1845938437c19b4167c755342e64ea771b905e5fe5532c3d40bce9aac74f218b070e92415dd146851974ddafa84e054d819de09cc3b55cc91d0bdf2b27186003f9c8529a29228384638a8402d7f224a6acdb033d335e6e9685c9ea95e083eaffd056b5a1045a1ef0882fe7b003899ccccf5cd2dddf04fdf35cd9e4b8f145820ef4ff38b9f5066d6c59941c8c54e2c047a795114d142ef206b55158cdc2dddd36d1d50a95537a58c560636de7fee15e5ececf0d3b91753aa072739ed02c22e31c29af4aeff42d477a04c1a661cd7bb1062d745dd3c1aa1e6dc8cf58a69d8e26d370feffa84a6fb1b7a9106d6649d85bd69501fa11dfaa60ff0afc3f863b8572a6b8f6c8e9b93c77d4a6931538bf34428ef197f2dd8a8cb29f3f775fbbdcf2cefd25d0675a6f8ffef25851e93cb2a6d47ab6b9dfc55ee323405e7d16a812ab4a7136fe39793f8adcee1d2c43ad6694d1ca9429d81b856c8cbb70c11e9f08ed3c8251e6b0500f76301b88904790dd1066e11acdd2e2ea6c9f44aa7620095bc6bb033cae63a02cd89682bc7806076550829b7246ce3ae1c807b1773e1a0d016c9928ac422c13074ea349e98893d9a9ec408f67b1e44e2aa20950f1a979d028f843b09352cb16e3120edc9511ffb5b8a39e0010c5391300406181fa6aeb2106cd19cf03fc9cf9ee115bf4b75288615afabda3fefaa7635f4a41308222d0a2f761fc46368cc446afb997790c4f63f5f498edb61dbd37fc5cc8e35e7a0baa9d1d32cc01a09c9dcd7f0860918bf9e4bd5b4b19499ee0c1dc62b85479883ac7d21af8fa342c09f9e3b2b0b0db7763c67489dbe41c55bcec711bcbffaf6a51bd09d77feeea1027ae1fed10bde472d5f53d03f3545812a036a5a32ba380c8623b1edffe9b6defbd1f30c420e1b8b97815d85751044c912d3b276579a1a39e8b933d2fc5647c53c4e0e76d654c6b3bfb30f20f261335f3af8f5f7175d53903c41e845d84ec10d61d52f89839928170d9698d69b5b5131d76309a2be1155ba679cae0fb3ab2930f497f2e297daccb1606f74013d714c1641539a118e018015600104b3f28319f7909800aeda81fb193f01acf8455c0cb0533b865cbea6a09ec9b2f9028d7a5075558ad3c29a432f810207d7808ce38f985fe705f779d762950e490823b722e8a488e990c3c14700d99e5a111ba76df8f36262bd98e13bfbbd7b6e9f209fc829d132e96a5ad93a096327f8a6c3e2a0ed0721305389c9fbfed6bc281c23fd2f08a387a0a9625a21e0bd2b1aefdb5a4795227cf826e13e7614025d020387391c24b4adaa66aa24267bedfd238f9c1f19ff8a62be06643ea10cd2c5a9a49df4bb8651ca3ff8ed5a1816dc95b54eb94c47606eeb8f03d55378e4d07a0d2b55424c8f1b171265d72b263c1d3bc8120418dc624e9cd8460e6212f23f93013f8acacffb103803840ffcc2a0189f9d9ca378fb799516d47baace709016b1dc033c7d806541dd05a9b87cab6ff1bdc40d833c6e7c5dc8e7bbd7c9b362d530b517445128d3ce612e85e70c3922d8be945eb7ce9162d84fff1f8568d54f2306a889883a6bd061c0a7ccb83158ccc0b4bbcee9ae7a2905a5b2af36e90e21aa1ed1ca79f0a3baf7d0fd07430fd214bd7507fed1d591c8f7afa567d5e8a2ba636aa83b9e6bfe8a55c21a3352ec4c2d8b3fc44aa1457be17f8274bb23691e1c2108cec1079a0dba020544bdd8701de83a321979e3d3393cb155349a2ba793259cff46a34da302265b3fde9c46e46e047b52d792a0658615a2efca88bd72466024d76e9a0f5a60a29f9caa4e1c6329c6b1f3a22132ebfd2e35082efa9b6c4f53dd5a87e374f13908da6a455eff44f7889eac4ab39f98cfb23da5e7a867c9d265d78e6bd4c12e669e70f5bbc952b29564c345a4b654b59e3f1522fc4014e98d4e83dac248513ae889f2714fadfa0764ef8f24b3a1cee4461c249c47038a5ed2f79572adbe5b64fff07f907874497a188f23b1f651565d7f3c19ded6f5811a726822077d2bb5f3be3650e04069281ce87b58be7bc3e20b64f2ecb87fb3158ee80aa9fadfe4e9696f4d1369edcf955e7382441aaf91a3a88814db3258cd86d46ef3a5624f3d7713dbdcc451ff97f54d875050b6ee22fe953825a25366bfdabcf971617e555fccbd8a3ac34c5674ace3ed335d47670ab92859ea055da30f8dbd70fc8b5b973f16ed724ff974011b54b3822ce892a8402fbc52a8f36a6e1bb17728c703acd79ff5eb27eac94f0abfd38e05efa09fa16fec9e91b43b493bca2c65a4d4f8c4842f8024b0ae7718a60b3dd789a6ee217666c04cb37d9fc7ecf97b6a977aa06b28ef1e4f4a88f92945ff8036cec4b45a8031facae05db9664b4f3dfcddeec0d8c93aa37f314e9e4864bd02ba3c4a26b76634fa4755978550ffc6d1fd6c0b82014804fe4edbc5b2948437e56d5ba8be64c8c893649275f2c51824b8a47f1da115e4288247627fe5d93a9bdc59e82c68ad60201209dbd28c69b8d47f9707ebbaf9f28d8efc1f8ee7bd87b9ac27ea84b025c8f6a4489f0abd380879decbff0e3c2c086ea5c6e35cef491a7b7faaa6aa2ea5d57b124f2a23a42d0f2cc3e7d81f2b2f36f6e432e2ade7d206b4ff207ba419db3f78057c01cada93d7c73119ee2ac70f3ab0ca4d413050e598572e552b56c79ae6b71a7e52e5b7a61241788d2a66007505eb58fa558ee8e426ec3e73f33626ea1ec887ed02872de1d1adc8529ba552202f42606169515275309d02d261a133648f1def41be46709a8978a69009c025e9ffb76fe2d14708d4fdfacd35edfb3035a217e8446a0061fa970f96b765f11b6c22242d925511056a3a629ed133a3ce97663a8502837c5dbccfbbb64fc10b33e6d91613d13f2cb3cdd2e1f0681360a936bdd598f2ee0c4666709c489431937e8f0ab25f1495b373ab079dd7514e4429ebbeac162ddbbf8e4816a150ee9e4c0d7ee24c8eee2cee74a3c5047a4a3829d61a51348b1c5785014e92e171f891dd226e3a0b368fb7c416300884aa1e4d4c712e1af3d92337468df4f525159f52b7b15fdafca58dcd4b5ab8c167f5fbb913f9a9b634a7aaa249f857ffd864673af7e2fe8a14b3afd8cbd738a0a53cce423c44f4901ce0f115a49b8d3f5c02a6a75965b8931042a0ef365e17a6c64f3037f7e19b4fc0042360700ff5ce796565b08d675924c16633cd6429a7f91845647b1a4b9c9e1dee0eef0f7850b9775f7cbff37c97d20abab75021c4c279d176f39ae7c2991ad35e6868c57cb394a4df5d749661f13abb2374b8a1a0cb9e550aa33df0f747589e17f28987798ccfc041576fef5a0d1440f379acc198c8e3f3fa381a07fa6e9ef5556ac1b9582d77459c8136f223c8a8df30abaa3f4288073e085b7d4202eb65df54d59975fc1eaae74faa2d8a787a9dbfbabc7f2790a87075d0bc49815c86dbed4ccfb071796ae5844fce1be5422f9f9a678a578a1bff0bfff8e00b53d221768f90b579b25eaeffd1bf2af8094b7fa45a692121668a33e56eb22efd6ff44c6fae8e9485a7dc71591f537a97386de687a8bb59b1485535e10dec589bd6788521acae68bbfa46fb55c26ae109ce3a7adefe7e58604284a8eebc4ac01df2580bb5c14b79fdc1bc4d3a20627fb3bfd1c1518ab530b070997aad62dacc58a4cb040923008e741a9b38da350d6f94585d1a6b85316d048ef2b3ee6d9175fb3d87c0489a4277f50a7d67849a42bb444eedd385b2c6959774872b0e68adb0e2e028e09d41d21eb7f1a6b22450d339eefcd10d9ec4f4ea880d2004bc81399dee57753627b4ed967b0e6fa749c0636e0957ff3fd36adb79bd25153e6e5fcf87f7f10094632bb7bf0f58d9ade07cf78abd2ec20d2dad1e487a8fe26732aaf00c776a3765727e7ea168af5a7f58fb0d05e5afcece48143b5cdfe0609ed84e1b0d8d90e1241b2f525ea2aaa0540d4574274f7dd5029ad55b86349232e6a09191ad1d4ec2cb97bef093fcfbd0c405f062f21a83abec1cf7623baf5cd862148a519977955b208255ad16a0c06568f412c78a5abffdf0c56f56cdf39ec295501f998889e0f4fb375a94217c7cdfab2b4dea516977d559cb02519298baccf739fa8ddca306e808a7e41b2f5a14281bd0eec5214644d2639cc1b58abf57bc44082ef31029e64329abb5b77d720199efc4fed9a88d48648a771b2d9a5814d7539a44f97e7604c59e3428d49d3216528c830be1067a1abaa87393d662ff51e1e0ece8d875ccc01927ed8182b8bd76ae8c4e82541e96f0e5d4252d3bfec8f858cbf428b856864235aabc95e3eccd594a4622281c36f2cfc081bf83b9aae8bea9ac540626807a229f4c912b8ad439934032b75fbc89b669cd672600e012fa862eb632b81f60610ecf1a9aaa8be7e28ccd31826804e8d1e57ce2c83daf5e5ff6f54775e06b6361d2451f9c74d812c8399a1757bb00a356c45bd2fab5b2f4630125cd67760e0743c2838a1b167b4e53550807179b7a419b75c83a925d14cb9ff48fd67daaba1dc61248db869d4f2aa45b909679159d87698700afafdc23bb0c64b5875d5673d4e51409ad24b99222a4d57c5beddd003dcd63d74b50fbbd6c12ba4261f531bcc3e6a3fb58e946b28d53a5040531bf22c6719dcdb8ece16b0ac5dd7b6a0e871f43750c270c8812c4b60c389fa18b5897c1ae86820814980ea111e297b9a5f2af1428f26324ac7643c903c16c89294c90e3ae3d30ccf9b07304641cfa73dca86c34f4eecf40e5a4a148c1550587b13fbd050f30dd182fd6066bc8432aa67f9d759279b30998111b9b5208ff4a038dea07bbe136d5dff4f8fb0da4fa1f3ba9e8681ef21990f291eb49aeef33c52bbeca68288beeae9f827d522bab2bb81c926935f2d6f7954a903f73b58b055c83e8453514ddc4020e4bdd6a42c966f0e0b6139e27685d82370943fea038ec0fe0d547a7dd4cbb6ed5af754c2bdd71ccb5567bb9a443b56b7e2f6b2a18813ad6124fba520207b80698199fd072e510e90c3424cf4cacb4c7796da35fdd0c5fcc4069e830ac8cd9969e", 0xffd) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x18}, @mcast2, @dev={0xfe, 0x80, [], 0x21}, 0x1f, 0x4, 0x7, 0x0, 0x800, 0x84600000, r4}) flock(0xffffffffffffffff, 0x4) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 01:54:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, 0xffffffffffffffff) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 189.452027][ T8190] IPVS: ftp: loaded support on port[0] = 21 01:54:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x0, 0x40000, 0xfff) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64], @ANYRESDEC=0x0, @ANYPTR64, @ANYRESOCT], 0x4, 0x0) accept4(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) 01:54:24 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0xe782, 0x6, 0xfff}, 'syz0\x00', 0x2}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) dup2(r0, r1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @remote}, {0x306, @dev={[], 0xc}}, 0x5e, {0x2, 0x4e20, @empty}, 'team_slave_0\x00'}) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0xb) 01:54:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, 0xffffffffffffffff) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:24 executing program 0: setuid(0xee01) semget(0x3, 0x0, 0x340) 01:54:24 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1000000000000000) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) fallocate(r3, 0x0, 0x40000, 0xfff) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX]], 0x2, 0x0) fallocate(r1, 0x10, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) 01:54:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0xf0]}, @mcast2}}}}}}}, 0x0) 01:54:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x100) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 190.074374][ T8235] sd 0:0:1:0: device reset 01:54:24 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) [ 190.103265][ T8235] sd 0:0:1:0: device reset 01:54:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001300), 0x40000a2, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) [ 190.222034][ T8241] device bond0 entered promiscuous mode [ 190.228530][ T8241] device bond_slave_0 entered promiscuous mode [ 190.235156][ T8241] device bond_slave_1 entered promiscuous mode 01:54:24 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1000000000000000) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) fallocate(r3, 0x0, 0x40000, 0xfff) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX]], 0x2, 0x0) fallocate(r1, 0x10, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) [ 190.314688][ T8251] sd 0:0:1:0: device reset 01:54:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 190.815276][ T8250] û: renamed from bond0 01:54:25 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0xe782, 0x6, 0xfff}, 'syz0\x00', 0x2}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) dup2(r0, r1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @remote}, {0x306, @dev={[], 0xc}}, 0x5e, {0x2, 0x4e20, @empty}, 'team_slave_0\x00'}) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x810003, 0xb) 01:54:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:25 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1000000000000000) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) fallocate(r3, 0x0, 0x40000, 0xfff) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX]], 0x2, 0x0) fallocate(r1, 0x10, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) 01:54:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:25 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x1000000000000000) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) fallocate(r3, 0x0, 0x40000, 0xfff) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX]], 0x2, 0x0) fallocate(r1, 0x10, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) 01:54:25 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) [ 190.935913][ T8274] sd 0:0:1:0: device reset 01:54:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) [ 191.196795][ T8297] sd 0:0:1:0: device reset 01:54:25 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 01:54:25 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:25 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) [ 191.565325][ T8318] device bond0 entered promiscuous mode [ 191.579848][ T8318] device bond_slave_0 entered promiscuous mode [ 191.586785][ T8318] device bond_slave_1 entered promiscuous mode [ 191.874018][ T8322] û: renamed from bond0 01:54:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) listen(r0, 0x5) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, 0x0) 01:54:26 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000100)={@broadcast, @dev, [], {@x25={0x805, {0x3, 0x68a31241, 0xff, "6f6374e93d5b0133eceb6cffb7439b5df9882450def86616ad0618b590afc19c35"}}}}, 0x0) 01:54:26 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:26 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 01:54:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:26 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 01:54:26 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:26 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) 01:54:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="04"]) 01:54:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:26 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 01:54:26 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:26 executing program 3: r0 = memfd_create(&(0x7f0000000000)='proc.wlan0ppp0keyring\x00', 0x5) fallocate(r0, 0x3, 0x7fffffffffffdffe, 0x2) 01:54:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"]) 01:54:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x8, 0xff}) 01:54:26 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"]) [ 192.786380][ T8385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 01:54:27 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:27 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") 01:54:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"]) 01:54:27 executing program 0: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x80000003) 01:54:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:27 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") 01:54:27 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"]) 01:54:27 executing program 0: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x80000003) 01:54:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x402040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(r0, r1, 0x0, 0x0) 01:54:27 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) r1 = socket$inet(0x2, 0x3, 0x1f) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") 01:54:27 executing program 0: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) 01:54:27 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x80000003) 01:54:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, 0x0) 01:54:27 executing program 5: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:27 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getgid() listen(r1, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300), 0x4) 01:54:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x80000003) 01:54:27 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:27 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) socket$inet(0x2, 0x3, 0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 01:54:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000003) 01:54:27 executing program 5: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, 0x0) 01:54:28 executing program 4: r0 = eventfd(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000b40)={0x9}, 0x9) 01:54:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000003) 01:54:28 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) socket$inet(0x2, 0x3, 0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 01:54:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, 0x0) 01:54:28 executing program 5: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:28 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000080)="d026d91506fd51b8a6734d7bfa2312d6475d079b81a0f000ffb4fd0c528be4773e5aaef608c1ba596a76a9a1510269ed34590b81e2aa0260be81fd7ee56da24306c645c0a052a77f1b20c93814ce", 0x4e, 0x20000000, 0x0, 0x0) 01:54:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[]) 01:54:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000003) 01:54:28 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:28 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) gettid() write$cgroup_pid(r2, 0x0, 0x0) 01:54:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x80000003) 01:54:28 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) socket$inet(0x2, 0x3, 0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 01:54:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[]) 01:54:28 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:28 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, 0x0) capget(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) bind(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) syz_open_procfs(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = epoll_create1(0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) keyctl$session_to_parent(0x12) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000010c0)) 01:54:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x80000003) 01:54:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[]) 01:54:28 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"]) 01:54:28 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bond0\x00', 0xfffffffffffffffc}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc5f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 01:54:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="41b2af0fc5a66d7eff82c7a4f704860a215943e94a3bf6793069cc53f592b7d1", 0x20, 0x76f3}]) 01:54:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 01:54:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') sendfile(r0, r1, 0x0, 0x80000003) 01:54:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0) write$P9_RLINK(r0, &(0x7f0000000280)={0x7, 0x47, 0x1}, 0x7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000080)='|', 0x1, 0xfffffffffffffffe, 0x0, 0x0)