Warning: Permanently added '[localhost]:2831' (ECDSA) to the list of known hosts. 2020/07/31 00:22:15 fuzzer started 2020/07/31 00:22:16 dialing manager at 10.0.2.10:40569 2020/07/31 00:22:16 syscalls: 3262 2020/07/31 00:22:16 code coverage: enabled 2020/07/31 00:22:16 comparison tracing: enabled 2020/07/31 00:22:16 extra coverage: enabled 2020/07/31 00:22:16 setuid sandbox: enabled 2020/07/31 00:22:16 namespace sandbox: enabled 2020/07/31 00:22:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/31 00:22:16 fault injection: enabled 2020/07/31 00:22:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/31 00:22:16 net packet injection: enabled 2020/07/31 00:22:16 net device setup: enabled 2020/07/31 00:22:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/31 00:22:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/31 00:22:16 USB emulation: enabled 2020/07/31 00:22:16 hci packet injection: enabled 00:23:13 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') 00:23:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB='>'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:23:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) syzkaller login: [ 258.486177][ T9080] IPVS: ftp: loaded support on port[0] = 21 [ 258.486239][ T9078] IPVS: ftp: loaded support on port[0] = 21 00:23:15 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 258.987990][ T9082] IPVS: ftp: loaded support on port[0] = 21 [ 259.184052][ T9078] chnl_net:caif_netlink_parms(): no params data found [ 259.219692][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 259.351688][ T9085] IPVS: ftp: loaded support on port[0] = 21 [ 259.498896][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.517298][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.535516][ T9080] device bridge_slave_0 entered promiscuous mode [ 259.586861][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.599396][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.614386][ T9080] device bridge_slave_1 entered promiscuous mode [ 259.629784][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.646536][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.660434][ T9078] device bridge_slave_0 entered promiscuous mode [ 259.678164][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.689047][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.703524][ T9078] device bridge_slave_1 entered promiscuous mode [ 259.785981][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.804737][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.834961][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.855072][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.874756][ T9082] chnl_net:caif_netlink_parms(): no params data found [ 259.919976][ T9078] team0: Port device team_slave_0 added [ 259.934642][ T9080] team0: Port device team_slave_0 added [ 259.949093][ T9078] team0: Port device team_slave_1 added [ 259.967741][ T9080] team0: Port device team_slave_1 added [ 260.018891][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.029784][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.066844][ T9080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.096856][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.113818][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.147276][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.171620][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.188579][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.235414][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.253875][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.265513][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.304389][ T9080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.416571][ T9082] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.426842][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.437984][ T9082] device bridge_slave_0 entered promiscuous mode [ 260.506472][ T9078] device hsr_slave_0 entered promiscuous mode [ 260.574012][ T9078] device hsr_slave_1 entered promiscuous mode [ 260.665808][ T9085] chnl_net:caif_netlink_parms(): no params data found [ 260.765511][ T9080] device hsr_slave_0 entered promiscuous mode [ 260.843172][ T9080] device hsr_slave_1 entered promiscuous mode [ 260.923486][ T9080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.940851][ T9080] Cannot create hsr debugfs directory [ 260.951320][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.961932][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.974649][ T9082] device bridge_slave_1 entered promiscuous mode [ 261.081906][ T9082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.144020][ T9082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.189776][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.205442][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.235319][ T9085] device bridge_slave_0 entered promiscuous mode [ 261.285041][ T9085] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.302730][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.314079][ T9085] device bridge_slave_1 entered promiscuous mode [ 261.360787][ T9085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.386666][ T9085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.421488][ T9082] team0: Port device team_slave_0 added [ 261.473150][ T9082] team0: Port device team_slave_1 added [ 261.551937][ T9085] team0: Port device team_slave_0 added [ 261.623275][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.663420][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.759718][ T9082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.810682][ T9085] team0: Port device team_slave_1 added [ 261.857471][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.904904][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.071427][ T9082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.197433][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.238549][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.363500][ T9085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.419097][ T9078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.517601][ T9078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.634624][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.668034][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.767426][ T9085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.859844][ T9082] device hsr_slave_0 entered promiscuous mode [ 262.973801][ T9082] device hsr_slave_1 entered promiscuous mode [ 263.073112][ T9082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.095672][ T9082] Cannot create hsr debugfs directory [ 263.119729][ T9078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.208851][ T9078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.449076][ T9085] device hsr_slave_0 entered promiscuous mode [ 263.535869][ T9085] device hsr_slave_1 entered promiscuous mode [ 263.602839][ T9085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.615711][ T9085] Cannot create hsr debugfs directory [ 263.646563][ T9080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.755841][ T9080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.865419][ T9080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.986617][ T9080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.244309][ T9082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.318243][ T9082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.459532][ T9082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.557706][ T9082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.634941][ T9085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.695534][ T9085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.818689][ T9085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.926500][ T9085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.085107][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.134657][ T9078] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.151037][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.172560][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.193121][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.210271][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.234836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.247498][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.301757][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.394419][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.462490][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.518531][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.549315][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.606954][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.638613][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.669345][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.706668][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.731726][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.770582][ T9078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.795395][ T9078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.829265][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.853001][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.873618][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.890180][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.907633][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.929970][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.946898][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.965191][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.984023][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.011075][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.034653][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.047790][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.064520][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.081253][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.099076][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.115497][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.139834][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.169192][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.188333][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.209538][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.221871][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.237113][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.255626][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.277294][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.291574][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.310361][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.334853][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.356545][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.378705][ T9082] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.404330][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.418432][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.435720][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.459255][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.482039][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.498367][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.516089][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.536721][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.550630][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.561526][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.572976][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.583149][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.620312][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.647739][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.664774][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.678615][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.694640][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.709812][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.728181][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.742110][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.765823][ T9085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.778539][ T9080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.796742][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.823105][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.836413][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.849531][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.862975][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.876767][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.894959][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.925292][ T9085] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.939199][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.954115][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.971425][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.987098][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.017503][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.038701][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.054268][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.073250][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.100409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.119189][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.146229][ T9078] device veth0_vlan entered promiscuous mode [ 267.167503][ T9082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.183761][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.198738][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.211642][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.227309][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.250032][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.273064][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.290221][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.307190][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.334797][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.352873][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.374160][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.400848][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.429910][ T9078] device veth1_vlan entered promiscuous mode [ 267.464045][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.491147][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.514061][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.542282][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.571145][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.611546][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.651677][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.670158][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.682487][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.724092][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.747622][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.766236][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.787333][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.806733][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.821260][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.844432][ T9085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.888882][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.904701][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.924270][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.942211][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.963491][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.987337][ T9085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.007483][ T9080] device veth0_vlan entered promiscuous mode [ 268.023256][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.046480][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.069394][ T9078] device veth0_macvtap entered promiscuous mode [ 268.093361][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.117557][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.138641][ T9080] device veth1_vlan entered promiscuous mode [ 268.157098][ T9078] device veth1_macvtap entered promiscuous mode [ 268.168730][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.186753][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.203315][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.233480][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.249499][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.265177][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.282240][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.300142][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.331545][ T9080] device veth0_macvtap entered promiscuous mode [ 268.353236][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.369407][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.393358][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.410592][ T9080] device veth1_macvtap entered promiscuous mode [ 268.426191][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.447137][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.461717][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.478674][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.497827][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.523341][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.536265][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.550353][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.560921][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.573758][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.584633][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.596622][ T9082] device veth0_vlan entered promiscuous mode [ 268.609118][ T9078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.624984][ T9085] device veth0_vlan entered promiscuous mode [ 268.657169][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.690884][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.734884][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.788478][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.835168][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.864986][ T9085] device veth1_vlan entered promiscuous mode [ 268.891391][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.919807][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.939750][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.962422][ T9082] device veth1_vlan entered promiscuous mode [ 268.998291][ T9080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.046919][ T9080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.087279][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.134147][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.151255][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.179758][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.196088][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.210576][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.365151][ T9085] device veth0_macvtap entered promiscuous mode [ 269.496540][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.508291][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.520972][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.539127][ T9085] device veth1_macvtap entered promiscuous mode [ 269.563071][ T9082] device veth0_macvtap entered promiscuous mode [ 269.647184][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.661839][ T2413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.677754][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.777408][ T9085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.804846][ T9085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.828095][ T9085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.850062][ T9085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.886315][ T9085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.911351][ T9082] device veth1_macvtap entered promiscuous mode [ 269.934473][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.949424][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.964776][ T9092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.993973][ T9085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.029731][ T9085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.055498][ T9085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.091732][ T9085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.127333][ T9085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.227093][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.246003][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.366426][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.396575][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.415664][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.434057][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.451733][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.489099][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.540544][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.574992][ T9104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.590691][ T9104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.686606][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.709840][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.758190][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.819212][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.902983][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.955589][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.021942][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.077229][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.108613][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.240397][ T9078] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation 00:23:28 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') 00:23:28 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e93dd2cdacbe6513"], 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)) 00:23:28 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') 00:23:28 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') 00:23:28 executing program 0: syz_open_procfs$namespace(0x0, 0x0) 00:23:28 executing program 0: syz_open_procfs$namespace(0x0, 0x0) [ 272.379881][ T41] kauditd_printk_skb: 3 callbacks suppressed [ 272.380360][ T41] audit: type=1800 audit(1596155009.330:31): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16557 res=0 [ 272.499344][ T41] audit: type=1800 audit(1596155009.450:32): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16557 res=0 00:23:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:29 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 00:23:29 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e93dd2cdacbe6513"], 0x3c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)) 00:23:29 executing program 0: syz_open_procfs$namespace(0x0, 0x0) [ 272.888020][ T36] Bluetooth: hci0: command 0x0409 tx timeout [ 272.909833][ T41] audit: type=1800 audit(1596155009.840:33): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16558 res=0 00:23:29 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 00:23:29 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 273.057269][ T41] audit: type=1800 audit(1596155010.010:34): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16569 res=0 00:23:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) read$char_raw(0xffffffffffffffff, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 273.242425][ T41] audit: type=1800 audit(1596155010.190:35): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16572 res=0 00:23:30 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getpid() ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000c00)=ANY=[@ANYRES64], &(0x7f0000000140)=0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x4) 00:23:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) read$char_raw(0xffffffffffffffff, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 273.375091][ T2413] Bluetooth: hci1: command 0x0409 tx timeout 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) read$char_raw(0xffffffffffffffff, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 273.688631][ T41] audit: type=1800 audit(1596155010.640:36): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16566 res=0 00:23:30 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getpid() ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000c00)=ANY=[@ANYRES64], &(0x7f0000000140)=0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x4) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) sendfile(r0, r2, 0x0, 0x200fff) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:30 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 273.913846][ T41] audit: type=1800 audit(1596155010.870:37): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16574 res=0 00:23:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) sendfile(r0, r2, 0x0, 0x200fff) 00:23:31 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getpid() ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000c00)=ANY=[@ANYRES64], &(0x7f0000000140)=0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x4) 00:23:31 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:31 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) sendfile(r0, r2, 0x0, 0x200fff) [ 274.059149][ T41] audit: type=1800 audit(1596155011.010:38): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16578 res=0 00:23:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:31 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 274.117898][ T41] audit: type=1800 audit(1596155011.070:39): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16557 res=0 00:23:31 executing program 0: exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) [ 274.332929][ T36] Bluetooth: hci2: command 0x0409 tx timeout [ 274.643540][ T5] Bluetooth: hci3: command 0x0409 tx timeout 00:23:31 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getpid() ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000c00)=ANY=[@ANYRES64], &(0x7f0000000140)=0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000008, 0x4) 00:23:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) 00:23:31 executing program 0: exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:31 executing program 0: exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200fff) 00:23:31 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 275.047580][ T3033] Bluetooth: hci0: command 0x041b tx timeout 00:23:32 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:32 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getpid() ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000c00)=ANY=[@ANYRES64], &(0x7f0000000140)=0x8) 00:23:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket(0x1e, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) 00:23:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:32 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:32 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 275.273788][ T41] audit: type=1800 audit(1596155012.200:40): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16579 res=0 00:23:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket(0x1e, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) 00:23:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 275.524539][ T3033] Bluetooth: hci1: command 0x041b tx timeout [ 276.405261][ T3033] Bluetooth: hci2: command 0x041b tx timeout [ 276.733658][ T3033] Bluetooth: hci3: command 0x041b tx timeout [ 277.123398][ T3033] Bluetooth: hci0: command 0x040f tx timeout 00:23:34 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getpid() ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) 00:23:34 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket(0x1e, 0x1, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) 00:23:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 277.585049][ T41] kauditd_printk_skb: 1 callbacks suppressed [ 277.585058][ T41] audit: type=1800 audit(1596155014.540:42): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16597 res=0 [ 277.612926][ T3033] Bluetooth: hci1: command 0x040f tx timeout 00:23:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) 00:23:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:34 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 277.746377][ T41] audit: type=1800 audit(1596155014.700:43): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16604 res=0 00:23:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:35 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getpid() ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) 00:23:35 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:35 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) 00:23:35 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_raw(r0, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 278.623040][ T41] audit: type=1800 audit(1596155015.570:44): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16607 res=0 00:23:35 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(0xffffffffffffffff, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 279.283644][ T3033] Bluetooth: hci2: command 0x040f tx timeout [ 279.297772][ T3033] Bluetooth: hci3: command 0x040f tx timeout [ 279.308267][ T3033] Bluetooth: hci0: command 0x0419 tx timeout [ 279.762873][ T3033] Bluetooth: hci1: command 0x0419 tx timeout 00:23:36 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getpid() 00:23:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:36 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) 00:23:36 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(0xffffffffffffffff, &(0x7f0000001a00)={""/56052}, 0xdc00) [ 279.908293][ T41] audit: type=1800 audit(1596155016.860:45): pid=9443 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16617 res=0 00:23:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:36 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(0xffffffffffffffff, &(0x7f0000001a00)={""/56052}, 0xdc00) 00:23:36 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:36 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:37 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 00:23:37 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 00:23:37 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) 00:23:37 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 00:23:37 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 280.499159][ T41] audit: type=1800 audit(1596155017.450:46): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16611 res=0 00:23:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) 00:23:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 280.571589][ T41] audit: type=1800 audit(1596155017.520:47): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16624 res=0 00:23:37 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) 00:23:37 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) [ 280.647684][ T41] audit: type=1800 audit(1596155017.580:48): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16620 res=0 00:23:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='\n'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) 00:23:37 executing program 3: close(0xffffffffffffffff) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(0xffffffffffffffff, r1, 0x0, 0x200fff) 00:23:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1786dd60077e00001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000000000003a2c"], 0x0) 00:23:37 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 280.787671][ T41] audit: type=1800 audit(1596155017.740:49): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16621 res=0 00:23:37 executing program 3: close(0xffffffffffffffff) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(0xffffffffffffffff, r1, 0x0, 0x200fff) 00:23:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1786dd60077e00001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000000000003a2c"], 0x0) [ 281.044970][ T41] audit: type=1800 audit(1596155018.000:50): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16626 res=0 00:23:38 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) 00:23:38 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:23:38 executing program 3: close(0xffffffffffffffff) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r1, 0x2008002) sendfile(0xffffffffffffffff, r1, 0x0, 0x200fff) 00:23:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10d082) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3fbcbab16c80fab, 0x11, r0, 0x0) write(r0, &(0x7f0000000000), 0x52698b21) 00:23:38 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 281.241257][ T41] audit: type=1800 audit(1596155018.190:51): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16625 res=0 00:23:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000001740)=0x3f7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0xffffffff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbb73f, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 281.363933][ T9103] Bluetooth: hci3: command 0x0419 tx timeout 00:23:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f10fb02bd67aa030596decc7a95425a3a07e758044ab4ea6f7aebcd88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 281.454428][ T9103] Bluetooth: hci2: command 0x0419 tx timeout [ 281.469601][ T9555] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 289.852779][ T0] NOHZ: local_softirq_pending 08 [ 291.774623][ T0] NOHZ: local_softirq_pending 08 00:23:38 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de0103000000fb92e9364b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd451285c4d6fafbc3cdd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r2, 0x2008002) sendfile(r0, r2, 0x0, 0x200fff) [ 330.811619][ T0] NOHZ: local_softirq_pending 08 [ 330.906981][ T2612] sd 0:0:0:0: [sda] tag#31 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=44s [ 330.937423][ T2612] sd 0:0:0:0: [sda] tag#31 CDB: Write(10) 2a 00 00 00 08 38 00 00 08 00 [ 330.962959][ T2612] blk_update_request: I/O error, dev sda, sector 2104 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 330.997068][ T2612] Buffer I/O error on dev sda1, logical block 7, lost async page write [ 331.038170][ T2612] sd 0:0:0:0: [sda] tag#23 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=44s [ 331.072522][ T2612] sd 0:0:0:0: [sda] tag#23 CDB: Write(10) 2a 00 00 00 08 08 00 00 10 00 [ 331.099147][ T2612] blk_update_request: I/O error, dev sda, sector 2056 op 0x1:(WRITE) flags 0x103000 phys_seg 2 prio class 0 [ 331.128294][ T2612] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 331.154573][ T2612] Buffer I/O error on dev sda1, logical block 2, lost async page write [ 331.176501][ T2612] sd 0:0:0:0: [sda] tag#16 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=44s [ 331.212122][ T2612] sd 0:0:0:0: [sda] tag#16 CDB: Write(10) 2a 00 00 01 37 50 00 00 e8 00 [ 331.229803][ T2612] blk_update_request: I/O error, dev sda, sector 79696 op 0x1:(WRITE) flags 0x103000 phys_seg 29 prio class 0 [ 331.258090][ T2612] Buffer I/O error on dev sda1, logical block 9706, lost async page write [ 331.293566][ T2612] Buffer I/O error on dev sda1, logical block 9707, lost async page write [ 331.318842][ T2612] Buffer I/O error on dev sda1, logical block 9708, lost async page write [ 331.360975][ T2612] Buffer I/O error on dev sda1, logical block 9709, lost async page write [ 331.395624][ T2612] Buffer I/O error on dev sda1, logical block 9710, lost async page write [ 331.430905][ T2612] Buffer I/O error on dev sda1, logical block 9711, lost async page write [ 331.481872][ T2612] Buffer I/O error on dev sda1, logical block 9712, lost async page write [ 331.525645][ T2612] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=44s [ 331.558420][ T2612] sd 0:0:0:0: [sda] tag#15 CDB: Write(10) 2a 00 00 01 09 10 00 00 08 00 [ 331.589487][ T2612] blk_update_request: I/O error, dev sda, sector 67856 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 331.630589][ T2612] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=44s [ 331.680254][ T2612] sd 0:0:0:0: [sda] tag#14 CDB: Write(10) 2a 00 00 00 29 48 00 00 48 00 [ 331.725160][ T2612] blk_update_request: I/O error, dev sda, sector 10568 op 0x1:(WRITE) flags 0x103000 phys_seg 9 prio class 0 [ 331.878027][ T2612] sd 0:0:0:0: [sda] tag#7 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=45s [ 331.940275][ T2612] sd 0:0:0:0: [sda] tag#7 CDB: Write(10) 2a 00 00 00 28 88 00 00 08 00 [ 331.983544][ T2612] blk_update_request: I/O error, dev sda, sector 10376 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 332.029330][ T2612] sd 0:0:0:0: [sda] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=45s [ 332.058377][ T2612] sd 0:0:0:0: [sda] tag#6 CDB: Write(10) 2a 00 00 00 0f 28 00 00 08 00 [ 332.080926][ T2612] blk_update_request: I/O error, dev sda, sector 3880 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 332.122125][ T2612] sd 0:0:0:0: [sda] tag#5 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=45s [ 332.153821][ T2612] sd 0:0:0:0: [sda] tag#5 CDB: Write(10) 2a 00 00 00 0e 88 00 00 08 00 [ 332.174562][ T2612] blk_update_request: I/O error, dev sda, sector 3720 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 332.205115][ T2612] sd 0:0:0:0: [sda] tag#4 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=45s [ 332.231799][ T2612] sd 0:0:0:0: [sda] tag#4 CDB: Write(10) 2a 00 00 00 0e 50 00 00 08 00 [ 332.251104][ T2612] blk_update_request: I/O error, dev sda, sector 3664 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 332.287132][ T2612] sd 0:0:0:0: [sda] tag#3 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_TIMEOUT cmd_age=45s [ 332.309842][ T2612] sd 0:0:0:0: [sda] tag#3 CDB: Write(10) 2a 00 00 00 0e 10 00 00 08 00 [ 332.339626][ T2612] blk_update_request: I/O error, dev sda, sector 3600 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 0 [ 345.526892][ T0] NOHZ: local_softirq_pending 08 [ 355.272465][ T0] NOHZ: local_softirq_pending 08 [ 366.011351][ T0] NOHZ: local_softirq_pending 08 [ 372.408214][ T0] NOHZ: local_softirq_pending 08 [ 392.902973][ C1] ------------[ cut here ]------------ [ 392.911828][ C1] WARNING: CPU: 1 PID: 0 at kernel/workqueue.c:1413 __queue_work+0xc2c/0xff0 [ 392.911828][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 392.911828][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.8.0-rc7-syzkaller #0 [ 392.911828][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 392.911828][ C1] Call Trace: [ 392.911828][ C1] [ 392.911828][ C1] dump_stack+0x18f/0x20d [ 392.911828][ C1] panic+0x2e3/0x75c [ 392.911828][ C1] ? __warn_printk+0xf3/0xf3 [ 392.911828][ C1] ? printk+0xba/0xed [ 392.911828][ C1] ? log_store.cold+0x16/0x16 [ 392.911828][ C1] ? __warn.cold+0x5/0x45 [ 392.911828][ C1] ? __warn+0xd6/0x1f2 [ 392.911828][ C1] ? __queue_work+0xc2c/0xff0 [ 392.911828][ C1] __warn.cold+0x20/0x45 [ 392.911828][ C1] ? __queue_work+0xc2c/0xff0 [ 392.911828][ C1] report_bug+0x1bd/0x210 [ 392.911828][ C1] handle_bug+0x38/0x90 [ 392.911828][ C1] exc_invalid_op+0x13/0x40 [ 392.911828][ C1] asm_exc_invalid_op+0x12/0x20 [ 392.911828][ C1] RIP: 0010:__queue_work+0xc2c/0xff0 [ 392.911828][ C1] Code: e0 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 ec 38 67 00 8b 5b 24 31 ff 83 e3 20 89 de e8 8d d0 27 00 85 db 75 7c e8 04 d4 27 00 <0f> 0b e9 42 fa ff ff e8 f8 d3 27 00 0f 0b e9 bb f9 ff ff e8 ec d3 [ 392.911828][ C1] RSP: 0018:ffffc900004e8cb0 EFLAGS: 00010046 [ 392.911828][ C1] RAX: 0000000000000000 RBX: 0000000000000100 RCX: ffffffff814be8b3 [ 392.911828][ C1] RDX: ffff88802c1ec380 RSI: ffffffff814be90c RDI: 0000000000000005 [ 392.911828][ C1] RBP: 0000000000000101 R08: 0000000000000001 R09: ffffffff8cb6a4a3 [ 393.214406][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805fdfe128 [ 393.214406][ C1] R13: 0000000000000000 R14: ffff88802930e000 R15: 0000000000000040 [ 393.214406][ C1] ? __queue_work+0xbd3/0xff0 [ 393.214406][ C1] ? __queue_work+0xc2c/0xff0 [ 393.214406][ C1] ? lock_is_held_type+0xb0/0xe0 [ 393.214406][ C1] call_timer_fn+0x1ac/0x760 [ 393.214406][ C1] ? execute_in_process_context+0x150/0x150 [ 393.214406][ C1] ? add_timer_on+0x4d0/0x4d0 [ 393.214406][ C1] ? lock_downgrade+0x820/0x820 [ 393.214406][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 393.214406][ C1] ? lock_is_held_type+0xb0/0xe0 [ 393.214406][ C1] ? execute_in_process_context+0x150/0x150 [ 393.214406][ C1] ? execute_in_process_context+0x150/0x150 [ 393.214406][ C1] __run_timers.part.0+0x376/0xa20 [ 393.214406][ C1] ? call_timer_fn+0x760/0x760 [ 393.214406][ C1] ? sched_clock_cpu+0x168/0x1b0 [ 393.214406][ C1] run_timer_softirq+0xae/0x1a0 [ 393.214406][ C1] __do_softirq+0x34c/0xa60 [ 393.214406][ C1] asm_call_on_stack+0xf/0x20 [ 393.214406][ C1] [ 393.214406][ C1] do_softirq_own_stack+0x111/0x170 [ 393.214406][ C1] irq_exit_rcu+0x229/0x270 [ 393.214406][ C1] sysvec_apic_timer_interrupt+0x54/0x120 [ 393.214406][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 393.214406][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 393.214406][ C1] Code: ff 4c 89 ef e8 e3 69 c8 f9 e9 8e fe ff ff 48 89 df e8 d6 69 c8 f9 eb 8a cc cc cc cc e9 07 00 00 00 0f 00 2d b4 ff 5d 00 fb f4 90 e9 07 00 00 00 0f 00 2d a4 ff 5d 00 f4 c3 cc cc 55 53 e8 a9 [ 393.214406][ C1] RSP: 0018:ffffc9000041fde8 EFLAGS: 00000282 [ 393.214406][ C1] RAX: 1ffffffff1369c14 RBX: ffff88802c1ec380 RCX: 0000000000000000 [ 393.214406][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff87eab336 [ 393.214406][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.214406][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed100583d870 [ 393.214406][ C1] R13: 0000000000000001 R14: ffffffff8aaf2548 R15: 0000000000000000 [ 393.214406][ C1] ? default_idle+0x16/0x70 [ 393.214406][ C1] default_idle+0x40/0x70 [ 393.214406][ C1] do_idle+0x38f/0x6d0 [ 393.214406][ C1] ? arch_cpu_idle_exit+0x70/0x70 [ 393.214406][ C1] cpu_startup_entry+0x14/0x20 [ 393.214406][ C1] start_secondary+0x2b3/0x370 [ 393.214406][ C1] ? set_cpu_sibling_map+0x1e80/0x1e80 [ 393.214406][ C1] secondary_startup_64+0xa4/0xb0 [ 393.214406][ C1] Kernel Offset: disabled [ 393.214406][ C1] Rebooting in 86400 seconds..