[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   42.245000][   T26] audit: type=1800 audit(1572278874.113:25): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   42.264824][   T26] audit: type=1800 audit(1572278874.113:26): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   42.284941][   T26] audit: type=1800 audit(1572278874.113:27): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.1.32' (ECDSA) to the list of known hosts.
2019/10/28 16:08:01 fuzzer started
2019/10/28 16:08:03 dialing manager at 10.128.0.105:45117
2019/10/28 16:08:03 syscalls: 2540
2019/10/28 16:08:03 code coverage: enabled
2019/10/28 16:08:03 comparison tracing: enabled
2019/10/28 16:08:03 extra coverage: extra coverage is not supported by the kernel
2019/10/28 16:08:03 setuid sandbox: enabled
2019/10/28 16:08:03 namespace sandbox: enabled
2019/10/28 16:08:03 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/28 16:08:03 fault injection: enabled
2019/10/28 16:08:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/28 16:08:03 net packet injection: enabled
2019/10/28 16:08:03 net device setup: enabled
2019/10/28 16:08:03 concurrency sanitizer: enabled
2019/10/28 16:08:04 adding functions to KCSAN blacklist: '__hrtimer_run_queues' 'pid_update_inode' 'tick_sched_do_timer' 'rcu_gp_fqs_loop' '__tcp_select_window' 
16:08:06 executing program 0:
r0 = gettid()
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r1=>0xee00])
setresgid(0x0, 0x0, r1)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, 0x0)

syzkaller login: [   54.566121][ T7249] IPVS: ftp: loaded support on port[0] = 21
16:08:06 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002250700", 0x24)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x8, 0x9, 0x20})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(r3, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x20})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x6, 0x20, 0x4})

[   54.672854][ T7249] chnl_net:caif_netlink_parms(): no params data found
[   54.766590][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.773899][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.782423][ T7249] device bridge_slave_0 entered promiscuous mode
[   54.797368][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.804981][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.813062][ T7249] device bridge_slave_1 entered promiscuous mode
[   54.830296][ T7252] IPVS: ftp: loaded support on port[0] = 21
[   54.859501][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.882597][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
16:08:06 executing program 2:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240), &(0x7f0000000100), 0x0)

[   54.932059][ T7249] team0: Port device team_slave_0 added
[   54.939910][ T7249] team0: Port device team_slave_1 added
[   55.087584][ T7249] device hsr_slave_0 entered promiscuous mode
[   55.125594][ T7249] device hsr_slave_1 entered promiscuous mode
[   55.226203][ T7254] IPVS: ftp: loaded support on port[0] = 21
[   55.305830][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.312966][ T7249] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.320340][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.327494][ T7249] bridge0: port 1(bridge_slave_0) entered forwarding state
16:08:07 executing program 3:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4)

[   55.478119][ T7252] chnl_net:caif_netlink_parms(): no params data found
[   55.613722][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.692563][ T7249] 8021q: adding VLAN 0 to HW filter on device team0
[   55.755904][ T2603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.775543][ T2603] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.816321][ T2603] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.866169][ T2603] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   55.905345][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.912420][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.957071][ T7252] device bridge_slave_0 entered promiscuous mode
[   55.987990][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.016634][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.044982][ T7252] device bridge_slave_1 entered promiscuous mode
[   56.060889][ T2603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.085051][ T2603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.124728][ T2603] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.131842][ T2603] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.213935][ T7282] IPVS: ftp: loaded support on port[0] = 21
[   56.231508][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.254984][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.263877][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.271005][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.335121][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.365774][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.447043][ T7252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.476076][ T7252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.519996][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.536901][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
16:08:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x7ff}, 0x10)
write(r1, &(0x7f0000000ac0)="1c0000001a009b8a14e5f46b000000ff00000000fd02000000020000", 0x1c)

[   56.616589][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.645403][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.665245][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.711176][ T7249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.765887][ T7249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.812969][ T7252] team0: Port device team_slave_0 added
[   56.821270][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.855123][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.863951][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.925275][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.955110][ T7254] chnl_net:caif_netlink_parms(): no params data found
[   56.975421][ T7252] team0: Port device team_slave_1 added
[   57.054489][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.157947][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.184555][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.192522][ T7254] device bridge_slave_0 entered promiscuous mode
[   57.238861][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.254447][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.262419][ T7254] device bridge_slave_1 entered promiscuous mode
[   57.320853][ T7286] IPVS: ftp: loaded support on port[0] = 21
[   57.411823][ T7252] device hsr_slave_0 entered promiscuous mode
16:08:09 executing program 5:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

[   57.474802][ T7252] device hsr_slave_1 entered promiscuous mode
[   57.504432][ T7252] debugfs: Directory 'hsr0' with parent '/' already present!
[   57.530218][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.545085][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.611452][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.706221][ T7254] team0: Port device team_slave_0 added
[   57.742939][ T7254] team0: Port device team_slave_1 added
[   57.819264][ T7296] IPVS: ftp: loaded support on port[0] = 21
[   57.881557][ T7282] chnl_net:caif_netlink_parms(): no params data found
[   58.060731][ T7254] device hsr_slave_0 entered promiscuous mode
[   58.118344][ T7254] device hsr_slave_1 entered promiscuous mode
[   58.165133][ T7254] debugfs: Directory 'hsr0' with parent '/' already present!
[   58.202643][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.324292][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.341763][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.425216][ T7252] 8021q: adding VLAN 0 to HW filter on device team0
[   58.524971][ T7286] chnl_net:caif_netlink_parms(): no params data found
[   58.563627][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.580192][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.622965][ T7282] device bridge_slave_0 entered promiscuous mode
[   58.671299][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.685004][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.693709][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.700853][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.835127][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.844186][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.935161][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.942242][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
16:08:10 executing program 0:
r0 = gettid()
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r1=>0xee00])
setresgid(0x0, 0x0, r1)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, 0x0)

[   59.049356][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.064410][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.144585][ T7282] device bridge_slave_1 entered promiscuous mode
[   59.151511][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.175465][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.214862][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.255886][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.280145][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.335459][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.344291][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.491485][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.517939][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.555200][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.563760][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.635107][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.687469][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.715836][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.722912][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.775503][ T7286] device bridge_slave_0 entered promiscuous mode
[   59.846729][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.896685][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.903759][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.944464][ T7286] device bridge_slave_1 entered promiscuous mode
[   60.057343][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.140812][ T7252] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.252112][ T7286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.333572][ T7296] chnl_net:caif_netlink_parms(): no params data found
[   60.372707][ T7286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.415996][ T7282] team0: Port device team_slave_0 added
[   60.472875][ T7254] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.512275][ T7282] team0: Port device team_slave_1 added
[   60.672413][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.695067][ T7281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.746984][ T7254] 8021q: adding VLAN 0 to HW filter on device team0
[   60.786524][ T7286] team0: Port device team_slave_0 added
[   60.807975][ T7282] device hsr_slave_0 entered promiscuous mode
[   60.854793][ T7282] device hsr_slave_1 entered promiscuous mode
[   60.894412][ T7282] debugfs: Directory 'hsr0' with parent '/' already present!
[   60.904220][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.911969][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.952130][ T7296] device bridge_slave_0 entered promiscuous mode
[   60.995323][ T7286] team0: Port device team_slave_1 added
[   61.021512][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
16:08:12 executing program 0:
r0 = gettid()
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r1=>0xee00])
setresgid(0x0, 0x0, r1)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, 0x0)

[   61.055136][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.105188][ T2563] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.112341][ T2563] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.152330][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.169150][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.194248][ T7296] device bridge_slave_1 entered promiscuous mode
[   61.204715][    C0] hrtimer: interrupt took 30500 ns
[   61.312630][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.342090][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.393368][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.439858][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.447023][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.544212][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.569344][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.619861][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.657407][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.719274][ T7376] bond0: (slave bond_slave_1): Releasing backup interface
[   61.991149][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.047865][ T7286] device hsr_slave_0 entered promiscuous mode
[   62.101804][ T7286] device hsr_slave_1 entered promiscuous mode
[   62.284433][ T7286] debugfs: Directory 'hsr0' with parent '/' already present!
[   62.294213][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.347359][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.446372][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.468627][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.505351][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.514626][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.545038][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.558971][ T7254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.604572][ T7254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.616326][ T7386] bond0: (slave bond_slave_1): Releasing backup interface
[   62.767394][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.832752][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.879055][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.926102][ T7296] team0: Port device team_slave_0 added
[   62.949869][ T7296] team0: Port device team_slave_1 added
[   63.053391][ T7254] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.167506][ T7296] device hsr_slave_0 entered promiscuous mode
[   63.214794][ T7296] device hsr_slave_1 entered promiscuous mode
[   63.254628][ T7296] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.489017][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.596941][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.638599][ T7282] 8021q: adding VLAN 0 to HW filter on device team0
[   63.687439][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.710813][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.812015][ T7286] 8021q: adding VLAN 0 to HW filter on device team0
[   63.934862][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.942865][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.035103][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.043895][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.164839][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.171925][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.285194][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.293982][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.388984][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.396168][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.465467][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.534973][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.663260][ T7282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.754379][ T7282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.845071][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.853194][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.925125][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.933623][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.940857][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.075187][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.084011][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
16:08:17 executing program 0:
r0 = gettid()
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r1=>0xee00])
setresgid(0x0, 0x0, r1)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, 0x0)

16:08:17 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002250700", 0x24)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x8, 0x9, 0x20})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(r3, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x20})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x6, 0x20, 0x4})

[   65.224876][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.231967][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.309222][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.369752][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.430514][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.493522][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.553284][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.602313][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.652259][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.709361][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.814241][ T7463] bond0: (slave bond_slave_1): Releasing backup interface
[   66.299429][ T7466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.374550][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.387327][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.412797][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
16:08:18 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002250700", 0x24)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x8, 0x9, 0x20})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(r3, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x20})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x6, 0x20, 0x4})

16:08:18 executing program 2:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240), &(0x7f0000000100), 0x0)

16:08:18 executing program 0:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240), &(0x7f0000000100), 0x0)

[   66.430056][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.455762][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.465681][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.515585][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.565761][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.614751][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.651256][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.679483][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.732369][ T7286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.805769][ T7286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.867626][ T7486] bond0: (slave bond_slave_1): Releasing backup interface
[   67.623570][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.666202][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.696519][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.765195][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.809352][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.873326][ T7286] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.940563][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.959701][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.038706][ T7296] 8021q: adding VLAN 0 to HW filter on device team0
[   68.117832][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.195068][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.203955][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.224219][ T2563] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.231381][ T2563] bridge0: port 1(bridge_slave_0) entered forwarding state
16:08:20 executing program 2:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240), &(0x7f0000000100), 0x0)

16:08:20 executing program 0:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240), &(0x7f0000000100), 0x0)

[   68.296052][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.315705][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.324201][ T2563] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.331317][ T2563] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.383935][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.393668][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.409416][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.421848][ T2563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.454626][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.464020][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.478595][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.491971][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.501776][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.513699][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.522326][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.531521][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.540873][ T7296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.583181][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0
16:08:20 executing program 3:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4)

16:08:20 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe0002250700", 0x24)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x2000002)
fallocate(r1, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x8, 0x9, 0x20})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(r3, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x20})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x6, 0x20, 0x4})

[   68.990756][ T7549] bond0: (slave bond_slave_1): Releasing backup interface
[   69.102058][   T26] kauditd_printk_skb: 3 callbacks suppressed
[   69.102089][   T26] audit: type=1804 audit(1572278900.963:31): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir576236977/syzkaller.qgiYA2/0/bus" dev="sda1" ino=16550 res=1
[   69.520184][ T7554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
16:08:21 executing program 3:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4)

16:08:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x7ff}, 0x10)
write(r1, &(0x7f0000000ac0)="1c0000001a009b8a14e5f46b000000ff00000000fd02000000020000", 0x1c)

16:08:21 executing program 0:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240), &(0x7f0000000100), 0x0)

16:08:21 executing program 2:
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240), &(0x7f0000000100), 0x0)

16:08:21 executing program 1:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4)

16:08:21 executing program 5:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:21 executing program 3:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4)

16:08:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x7ff}, 0x10)
write(r1, &(0x7f0000000ac0)="1c0000001a009b8a14e5f46b000000ff00000000fd02000000020000", 0x1c)

16:08:21 executing program 1:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4)

16:08:21 executing program 5:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x7ff}, 0x10)
write(r1, &(0x7f0000000ac0)="1c0000001a009b8a14e5f46b000000ff00000000fd02000000020000", 0x1c)

16:08:22 executing program 3:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:22 executing program 1:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x5, 0x80000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4)

16:08:22 executing program 4:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

[   70.443778][   T26] audit: type=1804 audit(1572278902.303:32): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir813036678/syzkaller.ViacWZ/4/bus" dev="sda1" ino=16545 res=1
16:08:22 executing program 5:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:22 executing program 1:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:22 executing program 0:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:22 executing program 2:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

[   70.845850][   T26] audit: type=1804 audit(1572278902.713:33): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir754521319/syzkaller.IyCEGd/4/bus" dev="sda1" ino=16540 res=1
[   71.161608][   T26] audit: type=1804 audit(1572278902.843:34): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir576236977/syzkaller.qgiYA2/3/bus" dev="sda1" ino=16564 res=1
[   71.318716][   T26] audit: type=1804 audit(1572278902.853:35): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127048937/syzkaller.Adt4Xt/4/bus" dev="sda1" ino=16565 res=1
16:08:23 executing program 3:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:23 executing program 0:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

[   71.582797][   T26] audit: type=1804 audit(1572278903.263:36): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir544151013/syzkaller.6MCvJ6/7/bus" dev="sda1" ino=16572 res=1
16:08:23 executing program 4:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:23 executing program 2:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:23 executing program 5:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

[   71.878434][   T26] audit: type=1804 audit(1572278903.743:37): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir813036678/syzkaller.ViacWZ/5/bus" dev="sda1" ino=16541 res=1
16:08:24 executing program 1:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:24 executing program 0:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:24 executing program 4:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

[   72.308349][   T26] audit: type=1804 audit(1572278904.173:38): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127048937/syzkaller.Adt4Xt/5/bus" dev="sda1" ino=1426 res=1
16:08:24 executing program 5:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:24 executing program 3:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

[   72.805761][   T26] audit: type=1804 audit(1572278904.673:39): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir927822331/syzkaller.hhl9OM/9/bus" dev="sda1" ino=16541 res=1
[   73.208331][   T26] audit: type=1804 audit(1572278904.713:40): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir544151013/syzkaller.6MCvJ6/8/bus" dev="sda1" ino=16529 res=1
16:08:25 executing program 2:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:25 executing program 1:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:25 executing program 0:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:25 executing program 3:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:25 executing program 4:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:25 executing program 5:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:26 executing program 0:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:26 executing program 1:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

16:08:26 executing program 2:
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)
socket$inet(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)

[   74.444700][   T26] kauditd_printk_skb: 5 callbacks suppressed
[   74.444793][   T26] audit: type=1804 audit(1572278906.313:46): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir576236977/syzkaller.qgiYA2/6/bus" dev="sda1" ino=16532 res=1
[   74.542361][ T2492] ==================================================================
[   74.550512][ T2492] BUG: KCSAN: data-race in blk_mq_sched_dispatch_requests / blk_mq_sched_dispatch_requests
[   74.560474][ T2492] 
[   74.562804][ T2492] write to 0xffff888129970550 of 8 bytes by task 7834 on cpu 0:
[   74.570438][ T2492]  blk_mq_sched_dispatch_requests+0x118/0x380
[   74.576506][ T2492]  __blk_mq_run_hw_queue+0xb7/0x160
[   74.581705][ T2492]  __blk_mq_delay_run_hw_queue+0x31b/0x3a0
[   74.587518][ T2492]  blk_mq_run_hw_queue+0x103/0x1c0
[   74.592642][ T2492]  blk_mq_sched_insert_requests+0x1ca/0x2e0
[   74.598535][ T2492]  blk_mq_flush_plug_list+0x572/0x6c0
[   74.603911][ T2492]  blk_flush_plug_list+0x271/0x2a0
[   74.609024][ T2492]  blk_finish_plug+0x60/0x84
[   74.613622][ T2492]  ext4_writepages+0xddd/0x2300
[   74.618478][ T2492]  do_writepages+0x6b/0x170
[   74.622982][ T2492]  __filemap_fdatawrite_range+0x1c5/0x230
[   74.628703][ T2492]  file_write_and_wait_range+0xfd/0x160
[   74.634248][ T2492]  __generic_file_fsync+0x59/0x190
[   74.639359][ T2492]  ext4_sync_file+0x48e/0xb00
[   74.644024][ T2492] 
[   74.646350][ T2492] read to 0xffff888129970550 of 8 bytes by task 2492 on cpu 1:
[   74.653886][ T2492]  blk_mq_sched_dispatch_requests+0x104/0x380
[   74.659944][ T2492]  __blk_mq_run_hw_queue+0xb7/0x160
[   74.665141][ T2492]  blk_mq_run_work_fn+0x57/0x70
[   74.669990][ T2492]  process_one_work+0x3d4/0x890
[   74.674844][ T2492]  worker_thread+0xa0/0x800
[   74.679367][ T2492]  kthread+0x1d4/0x200
[   74.683438][ T2492]  ret_from_fork+0x1f/0x30
[   74.687838][ T2492] 
[   74.690155][ T2492] Reported by Kernel Concurrency Sanitizer on:
[   74.696306][ T2492] CPU: 1 PID: 2492 Comm: kworker/1:1H Not tainted 5.4.0-rc3+ #0
[   74.703922][ T2492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   74.713987][ T2492] Workqueue: kblockd blk_mq_run_work_fn
[   74.719528][ T2492] ==================================================================
[   74.727586][ T2492] Kernel panic - not syncing: panic_on_warn set ...
[   74.734212][ T2492] CPU: 1 PID: 2492 Comm: kworker/1:1H Not tainted 5.4.0-rc3+ #0
[   74.741838][ T2492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   74.751904][ T2492] Workqueue: kblockd blk_mq_run_work_fn
[   74.757446][ T2492] Call Trace:
[   74.760746][ T2492]  dump_stack+0xf5/0x159
[   74.764997][ T2492]  panic+0x210/0x640
[   74.768900][ T2492]  ? vprintk_func+0x8d/0x140
[   74.773494][ T2492]  kcsan_report.cold+0xc/0x10
[   74.778181][ T2492]  __kcsan_setup_watchpoint+0x32e/0x4a0
[   74.783738][ T2492]  __tsan_read8+0x2c/0x30
[   74.788163][ T2492]  blk_mq_sched_dispatch_requests+0x104/0x380
[   74.794240][ T2492]  ? __tsan_write4+0x32/0x40
[   74.798847][ T2492]  __blk_mq_run_hw_queue+0xb7/0x160
[   74.804051][ T2492]  blk_mq_run_work_fn+0x57/0x70
[   74.808909][ T2492]  process_one_work+0x3d4/0x890
[   74.813803][ T2492]  worker_thread+0xa0/0x800
[   74.818318][ T2492]  kthread+0x1d4/0x200
[   74.822393][ T2492]  ? rescuer_thread+0x6a0/0x6a0
[   74.827241][ T2492]  ? kthread_stop+0x2d0/0x2d0
[   74.831919][ T2492]  ret_from_fork+0x1f/0x30
[   74.837665][ T2492] Kernel Offset: disabled
[   74.842030][ T2492] Rebooting in 86400 seconds..