Warning: Permanently added '10.128.0.181' (ECDSA) to the list of known hosts. 2020/01/29 12:07:32 fuzzer started 2020/01/29 12:07:34 dialing manager at 10.128.0.105:34991 syzkaller login: [ 62.796005][ T8043] ld (8043) used greatest stack depth: 10136 bytes left 2020/01/29 12:07:35 syscalls: 2900 2020/01/29 12:07:35 code coverage: enabled 2020/01/29 12:07:35 comparison tracing: enabled 2020/01/29 12:07:35 extra coverage: enabled 2020/01/29 12:07:35 setuid sandbox: enabled 2020/01/29 12:07:35 namespace sandbox: enabled 2020/01/29 12:07:35 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/29 12:07:35 fault injection: enabled 2020/01/29 12:07:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/29 12:07:35 net packet injection: enabled 2020/01/29 12:07:35 net device setup: enabled 2020/01/29 12:07:35 concurrency sanitizer: enabled 2020/01/29 12:07:35 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 71.819477][ T8047] KCSAN: could not find function: 'poll_schedule_timeout' 2020/01/29 12:07:48 adding functions to KCSAN blacklist: 'shmem_add_to_page_cache' 'generic_update_time' 'ext4_mb_good_group' 'pipe_wait' 'tomoyo_supervisor' 'do_nanosleep' 'ext4_mark_iloc_dirty' 'futex_wait_queue_me' 'snd_seq_prioq_cell_out' '__hrtimer_run_queues' 'find_get_pages_range_tag' 'vm_area_dup' 'atime_needs_update' '__add_to_page_cache_locked' '__remove_assoc_queue' 'pipe_unlock' 'do_syslog' 'mod_timer' 'blk_mq_run_hw_queue' 'tick_nohz_idle_stop_tick' 'ip6_tnl_start_xmit' 'ext4_nonda_switch' '__skb_try_recv_from_queue' 'lruvec_lru_size' 'ext4_free_inodes_count' 'xas_find_marked' 'do_signal_stop' 'ep_poll' 'echo_char' 'process_srcu' 'ktime_get_real_seconds' '__snd_rawmidi_transmit_ack' '__perf_event_overflow' 'ext4_itable_unused_count' 'blk_mq_sched_dispatch_requests' 'do_exit' 'wbt_done' 'iput' 'ktime_get_seconds' 'kauditd_thread' 'generic_fillattr' 'virtqueue_get_buf_ctx' '__writeback_single_inode' '__filemap_fdatawrite_range' 'evict' 'iomap_dio_bio_actor' '__blk_queue_split' '__fsnotify_recalc_mask' 'blk_mq_get_request' 'ext4_has_free_clusters' 'audit_log_start' 'blk_mq_free_request' 'enqueue_timer' 'run_timer_softirq' 'tick_do_update_jiffies64' '__find_get_block' 'n_tty_receive_buf_common' 'd_delete' 'find_next_bit' 'poll_schedule_timeout' 'dd_has_work' 'rcu_gp_fqs_check_wake' '__ext4_new_inode' 'timer_clear_idle' 'watchdog' '__mark_inode_dirty' 'page_counter_try_charge' 'page_counter_charge' 'pid_update_inode' 'kcm_rfree' 'blk_stat_add' 'get_cpu_idle_time_us' 'tick_sched_do_timer' 'rcu_gp_fqs_loop' 'inode_sync_complete' 'wbt_issue' 'copy_process' 'blk_mq_dispatch_rq_list' 'file_remove_privs' 'ptrace_check_attach' 'pcpu_alloc' 'generic_write_end' 'taskstats_exit' 'ext4_free_inode' 'ext4_writepages' 'mm_update_next_owner' 'generic_file_read_iter' 'yama_ptracer_del' 'xas_clear_mark' 'dccp_rcv_reset' 'sit_tunnel_xmit' 'fsnotify' 'do_readlinkat' 12:11:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create1(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 12:11:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000240)=[{r4}, {r5}, {r0, 0x8021}, {r0}], 0x4, 0xffff) [ 315.458735][ T8050] IPVS: ftp: loaded support on port[0] = 21 [ 315.562033][ T8050] chnl_net:caif_netlink_parms(): no params data found [ 315.618713][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.626573][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.634687][ T8050] device bridge_slave_0 entered promiscuous mode [ 315.642899][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.662068][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.669927][ T8050] device bridge_slave_1 entered promiscuous mode [ 315.684300][ T8054] IPVS: ftp: loaded support on port[0] = 21 [ 315.704991][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 12:11:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) dup2(r2, r3) [ 315.733784][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.776232][ T8050] team0: Port device team_slave_0 added [ 315.783319][ T8050] team0: Port device team_slave_1 added [ 315.819368][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.841810][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.869054][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.890451][ T8054] chnl_net:caif_netlink_parms(): no params data found [ 315.901036][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.908439][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.935217][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.014551][ T8050] device hsr_slave_0 entered promiscuous mode 12:11:48 executing program 3: unshare(0x20020400) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044103, 0x0) [ 316.061657][ T8050] device hsr_slave_1 entered promiscuous mode [ 316.130311][ T8057] IPVS: ftp: loaded support on port[0] = 21 [ 316.157099][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.169546][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.177664][ T8054] device bridge_slave_0 entered promiscuous mode [ 316.207266][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.214469][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.223610][ T8054] device bridge_slave_1 entered promiscuous mode [ 316.280078][ T8059] IPVS: ftp: loaded support on port[0] = 21 [ 316.297655][ T8054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.313179][ T8054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:11:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 316.412205][ T8054] team0: Port device team_slave_0 added [ 316.426141][ T8057] chnl_net:caif_netlink_parms(): no params data found [ 316.436130][ T8050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.513389][ T8050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.564206][ T8054] team0: Port device team_slave_1 added [ 316.576969][ T8050] netdevsim netdevsim0 netdevsim2: renamed from eth2 12:11:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x0, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) [ 316.657569][ T8062] IPVS: ftp: loaded support on port[0] = 21 [ 316.680789][ T8050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.741335][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.748565][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.756684][ T8057] device bridge_slave_0 entered promiscuous mode [ 316.764813][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.772455][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.780217][ T8057] device bridge_slave_1 entered promiscuous mode [ 316.796934][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.804455][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.833154][ T8054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.846446][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.855428][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.883153][ T8054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.921942][ T8057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.932703][ T8069] IPVS: ftp: loaded support on port[0] = 21 [ 316.978026][ T8057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.033662][ T8054] device hsr_slave_0 entered promiscuous mode [ 317.081675][ T8054] device hsr_slave_1 entered promiscuous mode [ 317.131383][ T8054] debugfs: Directory 'hsr0' with parent '/' already present! [ 317.162923][ T8057] team0: Port device team_slave_0 added [ 317.171730][ T8057] team0: Port device team_slave_1 added [ 317.206925][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.213987][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.241275][ T8057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.253162][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 317.282458][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.289459][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.315513][ T8057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.403461][ T8057] device hsr_slave_0 entered promiscuous mode [ 317.431708][ T8057] device hsr_slave_1 entered promiscuous mode [ 317.472587][ T8057] debugfs: Directory 'hsr0' with parent '/' already present! [ 317.484976][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 317.534205][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.541482][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.549459][ T8059] device bridge_slave_0 entered promiscuous mode [ 317.590589][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.597941][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.606083][ T8059] device bridge_slave_1 entered promiscuous mode [ 317.644640][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.667174][ T8069] chnl_net:caif_netlink_parms(): no params data found [ 317.683050][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.690296][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.698645][ T8062] device bridge_slave_0 entered promiscuous mode [ 317.708677][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.740010][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.748321][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.755541][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.763726][ T8062] device bridge_slave_1 entered promiscuous mode [ 317.794600][ T8059] team0: Port device team_slave_0 added [ 317.810750][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.817954][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.825895][ T8069] device bridge_slave_0 entered promiscuous mode [ 317.838700][ T8059] team0: Port device team_slave_1 added [ 317.845380][ T8054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 317.904788][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.913075][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.920787][ T8069] device bridge_slave_1 entered promiscuous mode [ 317.931855][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.951609][ T8054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.005251][ T8054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 318.078969][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.106099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.117817][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.127319][ T8050] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.140536][ T8054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 318.193560][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.200595][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.227380][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.239545][ T8062] team0: Port device team_slave_0 added [ 318.245412][ T8057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.313672][ T8057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.366588][ T8057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.424794][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.434603][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.442152][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.468926][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.480928][ T8062] team0: Port device team_slave_1 added [ 318.490719][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.500068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.508996][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.516137][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.524654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.532949][ T8057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.574295][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.596571][ T8069] team0: Port device team_slave_0 added [ 318.614999][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.622051][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.648552][ T8062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.660428][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.667979][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.694494][ T8062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.707678][ T8069] team0: Port device team_slave_1 added [ 318.732118][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.741151][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.749698][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.756744][ T8053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.765172][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.774229][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.793831][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.800828][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.827482][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.872276][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.879286][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.905936][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.963817][ T8059] device hsr_slave_0 entered promiscuous mode [ 319.001642][ T8059] device hsr_slave_1 entered promiscuous mode [ 319.071520][ T8059] debugfs: Directory 'hsr0' with parent '/' already present! [ 319.079636][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.088683][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.097801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.106541][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.116499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.125005][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.133751][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.142196][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.150637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.160611][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.213361][ T8062] device hsr_slave_0 entered promiscuous mode [ 319.261730][ T8062] device hsr_slave_1 entered promiscuous mode [ 319.301459][ T8062] debugfs: Directory 'hsr0' with parent '/' already present! [ 319.327980][ T8050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.351233][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.360717][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.368265][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.414014][ T8069] device hsr_slave_0 entered promiscuous mode [ 319.451578][ T8069] device hsr_slave_1 entered promiscuous mode [ 319.501443][ T8069] debugfs: Directory 'hsr0' with parent '/' already present! [ 319.538623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.546609][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.571400][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 319.580371][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.590680][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.633489][ T8050] device veth0_vlan entered promiscuous mode [ 319.643092][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.652656][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.661222][ T2412] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.668425][ T2412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.678495][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.687129][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.695763][ T2412] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.702948][ T2412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.710899][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.720863][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.729585][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.737942][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.748631][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.756919][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.765354][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.780080][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.796706][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.805630][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.814804][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.836123][ T8050] device veth1_vlan entered promiscuous mode [ 319.855236][ T8059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.913501][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.922058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.930758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.938888][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.950765][ T8054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.961687][ T8054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.992048][ T8059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.043917][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.052412][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.060933][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.069487][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.077939][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.085606][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.093314][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.104955][ T8057] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.122103][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.129512][ T8059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.163731][ T8059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.216222][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.224944][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.233921][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.240995][ T8067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.249056][ T8069] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.287755][ T8069] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.333998][ T8069] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.383208][ T8069] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.426509][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.434870][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.444306][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.452900][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.460033][ T8053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.468210][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.503156][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.515317][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.524048][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.533079][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.541672][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.550388][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.559171][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.567706][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.576431][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.585219][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.597598][ T8057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.609875][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.629980][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.638829][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.647367][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.656677][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.668222][ T8050] device veth0_macvtap entered promiscuous mode [ 320.681938][ T8062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.734043][ T8062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.806457][ T8062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.868679][ T8050] device veth1_macvtap entered promiscuous mode [ 320.883988][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.892234][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.900700][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.909508][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.918340][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.926932][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.935550][ T8062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.974642][ T8054] device veth0_vlan entered promiscuous mode [ 320.999247][ T8057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.028063][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.038491][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.049078][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.056857][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.065924][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.089110][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.098091][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.112048][ T8054] device veth1_vlan entered promiscuous mode [ 321.125904][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.150187][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.158226][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.167850][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.206471][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.214850][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.231630][ T8054] device veth0_macvtap entered promiscuous mode [ 321.242951][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.253216][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.262677][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.271718][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.280201][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.289002][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.298084][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.306767][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.314059][ T8066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.322479][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.330640][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.339333][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.349466][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.365128][ T8054] device veth1_macvtap entered promiscuous mode [ 321.372412][ T8057] device veth0_vlan entered promiscuous mode [ 321.409461][ T8077] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 321.435894][ T8057] device veth1_vlan entered promiscuous mode [ 321.450842][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.458887][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.467913][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 321.483596][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.492788][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.501210][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.508292][ T8066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.516619][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.525764][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.535214][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.543972][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.552903][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.561850][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.570685][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.579508][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.590184][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 12:11:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000033c0)=""/4105, 0x1009}], 0x1) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) [ 321.600513][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 321.614514][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.628513][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.646175][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.670901][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 321.682863][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.694357][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.700750][ T8084] input: syz1 as /devices/virtual/input/input5 [ 321.704661][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.729991][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.741145][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.750375][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.765904][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.777861][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 321.790541][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.802303][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.823578][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.833636][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.853102][ T8062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.860381][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.869147][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.893213][ T8087] input: syz1 as /devices/virtual/input/input6 [ 321.924984][ T8057] device veth0_macvtap entered promiscuous mode [ 321.942247][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.954119][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.966157][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.977898][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.985092][ T8064] bridge0: port 1(bridge_slave_0) entered forwarding state 12:11:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='cpuset\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x75628b56) [ 321.997915][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.007100][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.016670][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.023836][ T8064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.034924][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.044179][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.053599][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.062722][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.096023][ T8057] device veth1_macvtap entered promiscuous mode [ 322.110996][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.133438][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.148278][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.167197][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.178795][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.188638][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.197558][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.206346][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.216044][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.224391][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.234353][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.249258][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.277124][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 12:11:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) read(r0, &(0x7f0000000200)=""/165, 0xa5) [ 322.290685][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.300725][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 322.311988][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.323675][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.340465][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 12:11:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000034c0)='maps\x00') read$FUSE(r1, &(0x7f0000000280), 0xfffffed3) r2 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="6d047c005d52994c0ad717be2900000047e2252cb7882b9abb2a2f9fb9399e0400c33f00102b0200000089da006a001499b2d1b3a48e2f36def66e54e4c909c01e8c4e61f8a0e814f7e2acdd0063c7caa49d5c0600000000000000dc10000000000096b966422ac67e307a1c75f954035ac283ff9d10305309658b8e060038e8941f9e1653e46a428657a686295981d565ed8b40b8382c58a17e2ee72ddd8e12402a08de7a022be9d4c732feee4ed546ef9724dfe2d43af9fe5bcd59bf9117673acfa22a2230ad03936500de7c065b8cc0b53b7f78e7505d8e2b53d167eeff070000000000000000ff01"], 0x2) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) [ 322.354714][ T8062] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.366964][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.376915][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.389147][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.398469][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.410961][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.421713][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.427481][ T8102] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 322.429200][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.464747][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.504994][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 322.516230][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.526408][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 322.537669][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.548817][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_1 12:11:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @loopback}}) [ 322.563546][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.572510][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.582001][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.590781][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.600044][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.609524][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.631847][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.639041][ T8067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.651769][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.660559][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.686547][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.693886][ T8067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.702163][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.711801][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.719774][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.727729][ T8067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 12:11:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) read(r0, &(0x7f0000000200)=""/165, 0xa5) [ 322.737808][ T8059] device veth0_vlan entered promiscuous mode [ 322.765612][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.774775][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.803671][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.813024][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.821869][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.838971][ T8059] device veth1_vlan entered promiscuous mode [ 322.868028][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.891474][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.899699][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 12:11:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5, 0xffffffff, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000006a6c434726591cef0000000000edfffd"], 0x3b}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 322.929994][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.938452][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.948384][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.004475][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.017687][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.025562][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.034661][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.046553][ T8062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.060717][ T8059] device veth0_macvtap entered promiscuous mode [ 323.075729][ T8059] device veth1_macvtap entered promiscuous mode [ 323.092886][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 12:11:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x12e}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x69811d8bbf261119, 0x0, 0xffffffffffffff92, 0x0, 0xfffffffffffffe48}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 323.114064][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.129805][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.138585][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 12:11:55 executing program 1: [ 323.217212][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.244184][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.275384][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.304223][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.323741][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.334297][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.347303][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.357794][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.371464][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.380760][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.393104][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.404984][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.412986][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.425178][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 323.436618][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.446813][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 323.458271][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.468644][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 323.479376][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.490809][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.515499][ T8069] device veth0_vlan entered promiscuous mode [ 323.523020][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.533234][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.542205][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.550869][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.580151][ T8069] device veth1_vlan entered promiscuous mode [ 323.593768][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.602516][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.610706][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.620243][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.629447][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.637492][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.653830][ T8062] device veth0_vlan entered promiscuous mode [ 323.675723][ T8062] device veth1_vlan entered promiscuous mode [ 323.688625][ T8069] device veth0_macvtap entered promiscuous mode [ 323.709878][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.720659][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.729923][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.739252][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.753040][ T8069] device veth1_macvtap entered promiscuous mode 12:11:55 executing program 3: [ 323.799852][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.809402][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.817817][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.826791][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.837516][ T8062] device veth0_macvtap entered promiscuous mode [ 323.851610][ T8062] device veth1_macvtap entered promiscuous mode [ 323.859841][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.870979][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.883047][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.894076][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.907266][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.918343][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.928896][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.939407][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.951077][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.969860][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 323.980774][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.990745][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.001792][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.011690][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.022331][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.032377][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.042955][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.053325][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 324.064375][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.075652][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.083237][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.091585][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.099724][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.108479][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.117375][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.126364][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.138079][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.150185][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.160531][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.171604][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.181952][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.192419][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.202683][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.213257][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.224933][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.233874][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.247430][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.258064][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.270723][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.283341][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.294160][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.304165][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.315155][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.325493][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 324.336111][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.347401][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.355613][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.364781][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.373753][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.382662][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:11:56 executing program 4: [ 324.566555][ T8162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:11:57 executing program 5: 12:11:57 executing program 0: 12:11:57 executing program 3: 12:11:57 executing program 1: 12:11:57 executing program 4: 12:11:57 executing program 4: 12:11:57 executing program 3: 12:11:57 executing program 0: 12:11:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cf8048e3c3de47a110526616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479ae6d68dba5d949bdce2613e9391fb4e8284f33c48c2ab9b125bc8fd963c1956097f213eb3bf3b8e0ec5de9ebf3b2b82b20c819ea15689ca6d5bed971a7cca1cb1412c6241a39f99a67cd1075c1e34b74458f527e30cdfed331217b6c777c38c0b62c186227f4d5b21a731759dd2cf690d9586c0724a478f3f19629e739ac2983e74f90b96624c841db9360cab86b73eb94808205182d41506316f881a39d9ebefa6603f565512c72c751dfb72c82676a1c7c8be0268258cf6ec7b2c7896b855703530fe4f2d9420ea57db9d986fd8e69bc2097c1cf2187e0c0166a2077635754da5dcc5da328", 0x12e}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x69811d8bbf261119, 0x0, 0xffffffffffffff92, 0x0, 0xfffffffffffffe48}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:11:58 executing program 1: 12:11:58 executing program 5: 12:11:58 executing program 3: 12:11:58 executing program 4: 12:11:58 executing program 0: 12:11:58 executing program 5: 12:11:58 executing program 0: 12:11:58 executing program 1: 12:11:58 executing program 3: 12:11:58 executing program 4: 12:11:58 executing program 5: 12:12:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x12e}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x69811d8bbf261119, 0x0, 0xffffffffffffff92, 0x0, 0xfffffffffffffe48}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:12:01 executing program 3: 12:12:01 executing program 0: 12:12:01 executing program 1: 12:12:01 executing program 4: 12:12:01 executing program 5: 12:12:01 executing program 5: 12:12:01 executing program 1: 12:12:01 executing program 0: 12:12:01 executing program 3: 12:12:01 executing program 4: 12:12:01 executing program 3: 12:12:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x12e}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x69811d8bbf261119, 0x0, 0xffffffffffffff92, 0x0, 0xfffffffffffffe48}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:12:04 executing program 0: 12:12:04 executing program 5: 12:12:04 executing program 4: 12:12:04 executing program 1: 12:12:04 executing program 3: 12:12:04 executing program 1: 12:12:04 executing program 5: 12:12:04 executing program 3: 12:12:04 executing program 0: 12:12:04 executing program 4: 12:12:04 executing program 1: 12:12:07 executing program 2: 12:12:07 executing program 3: 12:12:07 executing program 5: 12:12:07 executing program 0: 12:12:07 executing program 4: 12:12:07 executing program 1: 12:12:07 executing program 3: 12:12:07 executing program 1: 12:12:07 executing program 5: 12:12:07 executing program 2: 12:12:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5, 0xffffffff, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000006a6c434726591cef0000000000edfffd"], 0x3b}}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:12:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xa195) syz_genetlink_get_family_id$batadv(0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 12:12:08 executing program 5: 12:12:08 executing program 3: 12:12:08 executing program 1: [ 335.856486][ T27] audit: type=1800 audit(1580299927.983:31): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16608 res=0 12:12:08 executing program 2: 12:12:08 executing program 0: [ 335.966214][ T27] audit: type=1804 audit(1580299928.013:32): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir999571011/syzkaller.XvE8QO/11/file0" dev="sda1" ino=16608 res=1 12:12:08 executing program 3: 12:12:08 executing program 0: 12:12:08 executing program 5: 12:12:08 executing program 1: 12:12:08 executing program 2: 12:12:08 executing program 0: 12:12:08 executing program 4: 12:12:08 executing program 5: 12:12:08 executing program 3: 12:12:08 executing program 2: 12:12:08 executing program 0: 12:12:08 executing program 1: 12:12:08 executing program 3: 12:12:08 executing program 1: 12:12:08 executing program 5: 12:12:08 executing program 2: 12:12:08 executing program 0: 12:12:09 executing program 4: 12:12:09 executing program 0: 12:12:09 executing program 5: 12:12:09 executing program 2: 12:12:09 executing program 1: 12:12:09 executing program 3: 12:12:09 executing program 4: 12:12:09 executing program 0: 12:12:09 executing program 2: 12:12:09 executing program 3: 12:12:09 executing program 1: 12:12:09 executing program 4: 12:12:09 executing program 5: 12:12:09 executing program 2: 12:12:09 executing program 0: 12:12:09 executing program 5: 12:12:09 executing program 4: 12:12:09 executing program 3: 12:12:09 executing program 1: 12:12:09 executing program 0: 12:12:09 executing program 2: 12:12:10 executing program 5: 12:12:10 executing program 4: 12:12:10 executing program 3: 12:12:10 executing program 1: 12:12:10 executing program 0: 12:12:10 executing program 2: 12:12:10 executing program 5: 12:12:10 executing program 4: 12:12:10 executing program 3: 12:12:10 executing program 1: 12:12:10 executing program 4: 12:12:10 executing program 0: 12:12:10 executing program 5: 12:12:10 executing program 2: 12:12:10 executing program 3: 12:12:10 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) 12:12:10 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201bfffffff0a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 12:12:10 executing program 0: 12:12:10 executing program 5: 12:12:10 executing program 2: 12:12:10 executing program 3: [ 338.833579][ T8426] IPVS: ftp: loaded support on port[0] = 21 [ 338.874111][ C0] hrtimer: interrupt took 25527 ns 12:12:11 executing program 0: [ 338.938791][ T8433] IPVS: ftp: loaded support on port[0] = 21 [ 338.947485][ T8424] loop4: p1 p2 < > p3 p4 < p5 p6 > [ 338.994087][ T8424] loop4: partition table partially beyond EOD, truncated [ 339.065470][ T8424] loop4: p1 start 10 is beyond EOD, truncated [ 339.081409][ T8424] loop4: p2 start 25 is beyond EOD, truncated [ 339.107546][ T8424] loop4: p3 start 225 is beyond EOD, truncated [ 339.134538][ T8424] loop4: p4 size 2 extends beyond EOD, truncated [ 339.147003][ T8424] loop4: p5 start 10 is beyond EOD, truncated [ 339.156560][ T8424] loop4: p6 start 225 is beyond EOD, truncated 12:12:11 executing program 5: 12:12:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 12:12:11 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:12:11 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x110, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) socket$inet_tcp(0x2, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 339.221344][ T8113] tipc: TX() has been purged, node left! 12:12:11 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) r0 = creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) r1 = socket(0x10, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) fstat(r0, &(0x7f0000003a40)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}], 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) [ 339.304162][ T8424] loop4: p1 p2 < > p3 p4 < p5 p6 > 12:12:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') lseek(0xffffffffffffffff, 0x0, 0x2) r5 = open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x0) r6 = creat(0x0, 0x0) ftruncate(r6, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) sendfile(r8, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 339.359136][ T8424] loop4: partition table partially beyond EOD, truncated [ 339.394879][ T8424] loop4: p1 start 10 is beyond EOD, truncated [ 339.441327][ T8424] loop4: p2 start 25 is beyond EOD, truncated [ 339.447880][ T8424] loop4: p3 start 225 is beyond EOD, truncated [ 339.474324][ T8424] loop4: p4 size 2 extends beyond EOD, truncated [ 339.487971][ T8424] loop4: p5 start 10 is beyond EOD, truncated [ 339.489695][ T8461] IPVS: ftp: loaded support on port[0] = 21 [ 339.508029][ T8424] loop4: p6 start 225 is beyond EOD, truncated 12:12:11 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) 12:12:11 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="02010f0000000a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 339.634537][ T27] audit: type=1800 audit(1580299931.763:33): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16638 res=0 [ 339.765229][ T27] audit: type=1800 audit(1580299931.893:34): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16638 res=0 [ 339.903061][ T8478] IPVS: ftp: loaded support on port[0] = 21 [ 339.963060][ T8483] loop4: p1 < > p2 < > p3 p4 < p5 > [ 339.980348][ T8483] loop4: partition table partially beyond EOD, truncated [ 339.994074][ T8483] loop4: p1 start 10 is beyond EOD, truncated [ 340.000422][ T8483] loop4: p2 start 25 is beyond EOD, truncated [ 340.006685][ T8483] loop4: p3 start 225 is beyond EOD, truncated [ 340.020302][ T8483] loop4: p4 size 2 extends beyond EOD, truncated [ 340.035722][ T8483] loop4: p5 start 225 is beyond EOD, truncated 12:12:12 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x110, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) socket$inet_tcp(0x2, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 340.230976][ T8465] IPVS: ftp: loaded support on port[0] = 21 12:12:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 12:12:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 12:12:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 12:12:12 executing program 0: setrlimit(0x2, &(0x7f0000000780)={0x2000000, 0x20080000000}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000003, 0x32, 0xffffffffffffffff, 0x0) [ 340.635095][ T8480] IPVS: ftp: loaded support on port[0] = 21 [ 340.659521][ T27] audit: type=1800 audit(1580299932.783:35): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16631 res=0 [ 340.771064][ T27] audit: type=1800 audit(1580299932.893:36): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16631 res=0 [ 340.883575][ T27] audit: type=1800 audit(1580299932.923:37): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16631 res=0 [ 340.907389][ T8518] mmap: syz-executor.0 (8518): VmData 35270656 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. 12:12:13 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) 12:12:13 executing program 0: setrlimit(0x2, &(0x7f0000000780)={0x2000000, 0x20080000000}) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000003, 0x32, 0xffffffffffffffff, 0x0) [ 341.378176][ T8530] IPVS: ftp: loaded support on port[0] = 21 12:12:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 341.770838][ T27] audit: type=1800 audit(1580299933.893:38): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16647 res=0 [ 341.927572][ T27] audit: type=1800 audit(1580299934.043:39): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16647 res=0 [ 342.041044][ T27] audit: type=1800 audit(1580299934.053:40): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16647 res=0 12:12:15 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) r0 = creat(0x0, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) socket(0x10, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fstat(r0, &(0x7f0000003a40)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) 12:12:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 12:12:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 12:12:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 12:12:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 12:12:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 343.046339][ T27] audit: type=1800 audit(1580299935.173:41): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16651 res=0 [ 343.097653][ T8563] IPVS: ftp: loaded support on port[0] = 21 [ 343.206393][ T27] audit: type=1800 audit(1580299935.333:42): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16651 res=0 [ 343.246162][ T27] audit: type=1800 audit(1580299935.353:43): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16651 res=0 12:12:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/114) [ 343.907317][ T8563] IPVS: ftp: loaded support on port[0] = 21 12:12:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 12:12:16 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) [ 344.721618][ T8605] IPVS: ftp: loaded support on port[0] = 21 12:12:16 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="020185ffffff0a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 12:12:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x400) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x213) [ 345.193331][ T8113] tipc: TX() has been purged, node left! [ 345.239375][ T8113] tipc: TX() has been purged, node left! [ 345.276921][ T8113] tipc: TX() has been purged, node left! [ 345.376790][ T8113] tipc: TX() has been purged, node left! [ 345.407095][ T8113] tipc: TX() has been purged, node left! [ 345.451529][ T8113] tipc: TX() has been purged, node left! [ 345.529266][ T8606] IPVS: ftp: loaded support on port[0] = 21 [ 345.641389][ T8113] tipc: TX() has been purged, node left! 12:12:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="1f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440000000000e630c400000000000000000000000000f630c40"], 0x0, 0x0, 0x0}) [ 346.695852][ T8634] debugfs: File '8632' in directory 'proc' already present! 12:12:21 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) [ 349.072641][ T8655] IPVS: ftp: loaded support on port[0] = 21 [ 349.107998][ T8660] IPVS: ftp: loaded support on port[0] = 21 [ 349.198504][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.206070][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.214110][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.221587][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.229645][ T8113] device bridge_slave_1 left promiscuous mode [ 349.235958][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.322090][ T8113] device bridge_slave_0 left promiscuous mode [ 349.328503][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.365419][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.373141][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.381000][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.388518][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.397267][ T8113] device bridge_slave_1 left promiscuous mode [ 349.404889][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.452102][ T8113] device bridge_slave_0 left promiscuous mode [ 349.458499][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.508007][ T8113] device veth1_macvtap left promiscuous mode [ 349.514140][ T8113] device veth0_macvtap left promiscuous mode [ 349.520141][ T8113] device veth1_vlan left promiscuous mode [ 349.525999][ T8113] device veth0_vlan left promiscuous mode [ 349.532827][ T8113] device veth1_macvtap left promiscuous mode [ 349.539063][ T8113] device veth0_macvtap left promiscuous mode [ 349.545247][ T8113] device veth1_vlan left promiscuous mode [ 349.551006][ T8113] device veth0_vlan left promiscuous mode [ 351.761946][ T8113] device hsr_slave_0 left promiscuous mode [ 351.801370][ T8113] device hsr_slave_1 left promiscuous mode [ 351.852959][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 351.864156][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 351.874124][ T8113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.935150][ T8113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.015938][ T8113] bond0 (unregistering): Released all slaves [ 352.241823][ T8113] device hsr_slave_0 left promiscuous mode [ 352.271529][ T8113] device hsr_slave_1 left promiscuous mode [ 352.332158][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 352.343663][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 352.353912][ T8113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.396168][ T8113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.475443][ T8113] bond0 (unregistering): Released all slaves [ 352.610367][ T8663] IPVS: ftp: loaded support on port[0] = 21 [ 352.610448][ T8664] IPVS: ftp: loaded support on port[0] = 21 [ 352.690207][ T8660] chnl_net:caif_netlink_parms(): no params data found [ 352.749573][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.758786][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.767210][ T8660] device bridge_slave_0 entered promiscuous mode [ 352.782170][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.789319][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.797606][ T8660] device bridge_slave_1 entered promiscuous mode [ 352.836743][ T8660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.846376][ T8663] chnl_net:caif_netlink_parms(): no params data found [ 352.860970][ T8660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.903751][ T8660] team0: Port device team_slave_0 added [ 352.912826][ T8664] chnl_net:caif_netlink_parms(): no params data found [ 352.930804][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.938177][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.946117][ T8663] device bridge_slave_0 entered promiscuous mode [ 352.954462][ T8660] team0: Port device team_slave_1 added [ 352.960347][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.967462][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.975340][ T8663] device bridge_slave_1 entered promiscuous mode [ 353.011185][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.021370][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.048630][ T8660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.064879][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.072193][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.099307][ T8660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.198562][ T8663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.307407][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.314632][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.322842][ T8664] device bridge_slave_0 entered promiscuous mode [ 353.331364][ T8663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.456086][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.463518][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.471836][ T8664] device bridge_slave_1 entered promiscuous mode [ 353.623543][ T8660] device hsr_slave_0 entered promiscuous mode [ 353.675415][ T8660] device hsr_slave_1 entered promiscuous mode [ 353.751464][ T8660] debugfs: Directory 'hsr0' with parent '/' already present! [ 353.767252][ T8663] team0: Port device team_slave_0 added [ 353.804408][ T8664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.872357][ T8663] team0: Port device team_slave_1 added [ 353.907321][ T8664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.948173][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.971392][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.008460][ T8663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.033631][ T8664] team0: Port device team_slave_0 added [ 354.039738][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.051465][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.078458][ T8663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.102638][ T8664] team0: Port device team_slave_1 added [ 354.186874][ T8663] device hsr_slave_0 entered promiscuous mode [ 354.262152][ T8663] device hsr_slave_1 entered promiscuous mode [ 354.321347][ T8663] debugfs: Directory 'hsr0' with parent '/' already present! [ 354.346391][ T8664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.375916][ T8664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.441316][ T8664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.464738][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.486726][ T8664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.494086][ T8664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.520843][ T8664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.603757][ T8664] device hsr_slave_0 entered promiscuous mode [ 354.651642][ T8664] device hsr_slave_1 entered promiscuous mode [ 354.691356][ T8664] debugfs: Directory 'hsr0' with parent '/' already present! [ 354.706012][ T8660] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.738822][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.747199][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.755667][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.764379][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.773375][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.780578][ T8669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.788835][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.797589][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.806278][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.813390][ T8669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.821054][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.830308][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.839137][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.847710][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.856461][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.865000][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.874871][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.883084][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.897283][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.906057][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.925285][ T8660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.940471][ T8660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.955258][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.964820][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.002854][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.010429][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.020994][ T8660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.090120][ T8663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.135502][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.143856][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.157363][ T8663] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.171512][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.180347][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.188886][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.195991][ T8064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.216152][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.231977][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.240770][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.250435][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.257647][ T8064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.266498][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.275748][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.285198][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.350113][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.360315][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.369002][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.378732][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.387639][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.396664][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.405217][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.413897][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.422792][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.434849][ T8660] device veth0_vlan entered promiscuous mode [ 355.471858][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.480419][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.489339][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.500167][ T8663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.510680][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.519003][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.536266][ T8660] device veth1_vlan entered promiscuous mode [ 355.585516][ T8664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.597104][ T8663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.604711][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.613780][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.622877][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.630447][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.646780][ T8660] device veth0_macvtap entered promiscuous mode [ 355.683649][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.695779][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.706245][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.715477][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.723950][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.734381][ T8660] device veth1_macvtap entered promiscuous mode [ 355.745158][ T8664] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.760854][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.769500][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.779164][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.787825][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.794927][ T8125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.804241][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.813022][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 355.823660][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.834177][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 355.844673][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.854564][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 355.865388][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.875432][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 355.886144][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.897618][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.906583][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.917515][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.927658][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.938430][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.948407][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.959552][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.974022][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.984522][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.996208][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.013891][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.023108][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.032826][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.042435][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.052311][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.061700][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.070349][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.077429][ T8053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.109074][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.117981][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.128155][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.167011][ T8113] tipc: TX() has been purged, node left! [ 356.174352][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.187455][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.210622][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.232239][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.240856][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.294135][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.321157][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.351400][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.377829][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.404143][ T27] audit: type=1800 audit(1580299948.533:44): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16663 res=0 [ 356.429759][ T8663] device veth0_vlan entered promiscuous mode [ 356.442107][ T8113] tipc: TX() has been purged, node left! [ 356.448102][ T8113] tipc: TX() has been purged, node left! [ 356.461022][ T8664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.497142][ T8113] tipc: TX() has been purged, node left! [ 356.510296][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.543649][ T27] audit: type=1800 audit(1580299948.673:45): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16663 res=0 [ 356.575560][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.587415][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.607851][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.661456][ T27] audit: type=1800 audit(1580299948.693:46): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16663 res=0 [ 356.688813][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.711748][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.960086][ T8663] device veth1_vlan entered promiscuous mode 12:12:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7040000000000006a0a00fe000000008500000032000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="1c04ff01da6da9725f90c5a00800", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 12:12:29 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0x400) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000061000000000008d05661"]) 12:12:29 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) r0 = creat(0x0, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) socket(0x10, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fstat(r0, &(0x7f0000003a40)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) 12:12:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x3) [ 357.132554][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 357.144254][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 357.201143][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.218902][ T27] audit: type=1804 audit(1580299949.343:47): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir170354034/syzkaller.AnGfgm/30/file0" dev="sda1" ino=16669 res=1 [ 357.252949][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.268204][ T8663] device veth0_macvtap entered promiscuous mode [ 357.340867][ T8726] IPVS: ftp: loaded support on port[0] = 21 [ 357.397282][ T27] audit: type=1804 audit(1580299949.343:48): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir170354034/syzkaller.AnGfgm/30/file0" dev="sda1" ino=16669 res=1 [ 357.426535][ T27] audit: type=1804 audit(1580299949.343:49): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir170354034/syzkaller.AnGfgm/30/file0" dev="sda1" ino=16669 res=1 [ 357.556299][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.568540][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.600463][ T8664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.618700][ T8663] device veth1_macvtap entered promiscuous mode [ 358.061114][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.080412][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.125955][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.169113][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.179450][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.191220][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.221458][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.232528][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.242916][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.253725][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.263991][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.291732][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.313249][ T8663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.368798][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.383908][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.403114][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.424935][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.451318][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.463721][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.474226][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.484951][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.495806][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.506380][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.516714][ T8663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.527252][ T8663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.538404][ T8663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.578525][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.587678][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.715098][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.727774][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.746201][ T8664] device veth0_vlan entered promiscuous mode [ 358.795051][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.803721][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.820209][ T8664] device veth1_vlan entered promiscuous mode [ 358.827208][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.835603][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.843973][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.897451][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.906061][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.915062][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.925850][ T8664] device veth0_macvtap entered promiscuous mode [ 358.935819][ T8664] device veth1_macvtap entered promiscuous mode [ 358.980550][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.991779][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.001766][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 359.012516][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.022606][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 359.033309][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.043438][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 359.053982][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.064175][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 359.074824][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.085040][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 359.095842][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.107525][ T8664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.116179][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.124717][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.133419][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.142537][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.155814][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.163494][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.171584][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.179082][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.187252][ T8113] device bridge_slave_1 left promiscuous mode [ 359.193751][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.211961][ T8113] device bridge_slave_0 left promiscuous mode [ 359.218213][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.285372][ T8113] device veth1_macvtap left promiscuous mode [ 359.291449][ T8113] device veth0_macvtap left promiscuous mode [ 359.297557][ T8113] device veth1_vlan left promiscuous mode [ 359.303503][ T8113] device veth0_vlan left promiscuous mode [ 360.491710][ T8113] device hsr_slave_0 left promiscuous mode [ 360.531425][ T8113] device hsr_slave_1 left promiscuous mode [ 360.584742][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 360.596159][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 360.606435][ T8113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.644616][ T8113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.726610][ T8113] bond0 (unregistering): Released all slaves [ 360.869643][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.880398][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.890647][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.901362][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.911198][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.921676][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.931617][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.942767][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.953255][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 360.963855][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.975014][ T8664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.984347][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 360.993446][ T8073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.193020][ T27] audit: type=1800 audit(1580299953.323:50): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16677 res=0 [ 361.317587][ T27] audit: type=1800 audit(1580299953.443:51): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16677 res=0 [ 361.367450][ T27] audit: type=1800 audit(1580299953.493:52): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16677 res=0 12:12:34 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(0x0) open(0x0, 0x84002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = creat(0x0, 0x0) ftruncate(r5, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 12:12:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000005) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:12:34 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) 12:12:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 12:12:34 executing program 5: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x3, &(0x7f0000000080)='mqueue\x00', &(0x7f00000000c0)='./file0\x00', r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mqueue\x00', &(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='ppp1[\x00', &(0x7f0000000280)='\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='&em0wlan1-\x00', &(0x7f0000000380)='bdevtrusted\x00', 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='/dev/audio\x00', &(0x7f0000000200)='/dev/audio\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='bdevtrusted\x00', &(0x7f0000000180)='ppp1[\x00', 0x0) dup3(r1, r0, 0x0) 12:12:34 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x80104592, 0x0) [ 362.016871][ T27] audit: type=1800 audit(1580299954.143:53): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16675 res=0 12:12:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba00d883901e26861525000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @rand_addr, {[@lsrr={0x83, 0x17, 0x0, [@broadcast, @multicast2, @remote, @dev, @rand_addr]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x66) [ 362.523073][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 362.551196][ T8781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:12:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 362.642159][ T8781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.814399][ T8779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:12:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1007fffffff, 0x0, 0x0, 0x2}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) timerfd_create(0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r2, &(0x7f0000000180)="731247f8bf09abec01ced5d4dd6e92aa62aa5e935b7e32ca5c14d70409a996a1de1cf7f93a4586204c034bd8e4c941d69f646bd4ac73715023d30170e4da386060d1", 0x42, 0x8802, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r2, &(0x7f0000000040)="f57178", 0x3) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003680)=""/4120, 0x1018}], 0xffffffffffffd0a}}], 0x1, 0x0, 0x0) vmsplice(r2, &(0x7f0000000080), 0x0, 0xb) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r4 = getpgid(0x0) sched_setattr(r4, &(0x7f0000000400)={0x38, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:12:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) [ 362.921400][ T8779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.943213][ T27] audit: type=1800 audit(1580299955.043:54): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16675 res=0 [ 363.043949][ T8793] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:12:35 executing program 1: syz_read_part_table(0x80000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201630000000a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 12:12:35 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0x280900) syz_genetlink_get_family_id$nbd(0x0) open(0x0, 0x84002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = creat(0x0, 0x0) ftruncate(r5, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x280900) creat(&(0x7f0000000680)='./bus\x00', 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) [ 363.322653][ T8797] loop1: p1 p2 < > p3 p4 < p5 p6 > [ 363.330302][ T8797] loop1: p1 size 11290111 extends beyond EOD, truncated [ 363.351375][ T8797] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 363.370099][ T8797] loop1: p5 size 11290111 extends beyond EOD, truncated [ 363.378529][ T8797] loop1: p6 size 1912633224 extends beyond EOD, truncated [ 363.404574][ T8113] tipc: TX() has been purged, node left! [ 363.447376][ T27] audit: type=1800 audit(1580299955.573:55): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16676 res=0 [ 363.551374][ T8113] tipc: TX() has been purged, node left! [ 363.612554][ T8797] loop1: p1 p2 < > p3 p4 < p5 p6 > [ 363.627137][ T8797] loop1: p1 size 11290111 extends beyond EOD, truncated [ 363.643684][ T8797] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 363.696781][ T8797] loop1: p5 size 11290111 extends beyond EOD, truncated [ 363.731592][ T8797] loop1: p6 size 1912633224 extends beyond EOD, truncated 12:12:36 executing program 1: syz_read_part_table(0x80000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201630000000a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 364.232418][ T8820] loop1: p1 p2 < > p3 p4 < p5 p6 > 12:12:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x3000000, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 364.258018][ T8820] loop1: p1 size 11290111 extends beyond EOD, truncated [ 364.281497][ T8820] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 364.306415][ T8820] loop1: p5 size 11290111 extends beyond EOD, truncated [ 364.334954][ T8820] loop1: p6 size 1912633224 extends beyond EOD, truncated [ 365.690063][ T8850] IPVS: ftp: loaded support on port[0] = 21 [ 366.159828][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 366.198626][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.209236][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.217947][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.228966][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.238011][ T8113] device bridge_slave_1 left promiscuous mode [ 366.248975][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.292090][ T8113] device bridge_slave_0 left promiscuous mode [ 366.298300][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.374963][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.386676][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.395801][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.407313][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.415780][ T8113] device bridge_slave_1 left promiscuous mode [ 366.425625][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.461910][ T8113] device bridge_slave_0 left promiscuous mode [ 366.468091][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.518584][ T8113] device veth1_macvtap left promiscuous mode [ 366.524811][ T8113] device veth0_macvtap left promiscuous mode [ 366.531003][ T8113] device veth1_vlan left promiscuous mode [ 366.536877][ T8113] device veth0_vlan left promiscuous mode [ 366.542893][ T8113] device veth1_macvtap left promiscuous mode [ 366.548939][ T8113] device veth0_macvtap left promiscuous mode [ 366.555249][ T8113] device veth1_vlan left promiscuous mode [ 366.561422][ T8113] device veth0_vlan left promiscuous mode [ 368.701698][ T8113] device hsr_slave_0 left promiscuous mode [ 368.751507][ T8113] device hsr_slave_1 left promiscuous mode [ 368.823610][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 368.835346][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 368.845792][ T8113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.885432][ T8113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.965823][ T8113] bond0 (unregistering): Released all slaves [ 369.171607][ T8113] device hsr_slave_0 left promiscuous mode [ 369.241473][ T8113] device hsr_slave_1 left promiscuous mode [ 369.312568][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 369.323595][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 369.334366][ T8113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.375214][ T8113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.435180][ T8113] bond0 (unregistering): Released all slaves [ 369.539445][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.546613][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.554413][ T8850] device bridge_slave_0 entered promiscuous mode [ 369.565613][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.567206][ T8854] IPVS: ftp: loaded support on port[0] = 21 [ 369.572874][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.587872][ T8850] device bridge_slave_1 entered promiscuous mode [ 369.606623][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.624202][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.654907][ T8850] team0: Port device team_slave_0 added [ 369.663490][ T8850] team0: Port device team_slave_1 added [ 369.680329][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.687861][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.714575][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.726293][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.735669][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.767115][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.822887][ T8854] chnl_net:caif_netlink_parms(): no params data found [ 369.883625][ T8850] device hsr_slave_0 entered promiscuous mode [ 369.921677][ T8850] device hsr_slave_1 entered promiscuous mode [ 369.981366][ T8850] debugfs: Directory 'hsr0' with parent '/' already present! [ 370.026171][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.033408][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.042917][ T8854] device bridge_slave_0 entered promiscuous mode [ 370.052323][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.059658][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.067658][ T8854] device bridge_slave_1 entered promiscuous mode [ 370.090853][ T8854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.102135][ T8854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.226103][ T8854] team0: Port device team_slave_0 added [ 370.238557][ T8854] team0: Port device team_slave_1 added [ 370.286445][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.293670][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.324890][ T8854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.345351][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.354567][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.364297][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.395274][ T8854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.416462][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 370.429066][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.440217][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.449914][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.484570][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.496573][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.505580][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.512882][ T8064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.524844][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.534290][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.545500][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.552725][ T8064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.603691][ T8854] device hsr_slave_0 entered promiscuous mode [ 370.641781][ T8854] device hsr_slave_1 entered promiscuous mode [ 370.691369][ T8854] debugfs: Directory 'hsr0' with parent '/' already present! [ 370.699205][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.718212][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.727676][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.737430][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.746523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.755479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.764547][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.773722][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.790864][ T8850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.803530][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.823786][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.832362][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.840726][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.867405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.875483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.894797][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.927509][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.939959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.948695][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.959443][ T8854] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.969749][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.979720][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.988430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.995515][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.013020][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.024175][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.033388][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.042934][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.050123][ T8053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.058641][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.067546][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.076571][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.085327][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.104300][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.112456][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.121077][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.130132][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.138933][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.147637][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.156092][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.164338][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.173205][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.183818][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.208428][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.218917][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.229063][ T8850] device veth0_vlan entered promiscuous mode [ 371.245132][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.253432][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.267946][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.275504][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.283617][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.292681][ T8850] device veth1_vlan entered promiscuous mode [ 371.317585][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.332340][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.340603][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.349804][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.360960][ T8850] device veth0_macvtap entered promiscuous mode [ 371.371960][ T8850] device veth1_macvtap entered promiscuous mode [ 371.386513][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.397537][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.407579][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.418074][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.428264][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.440337][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.450415][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.461091][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.473178][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.482640][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.490782][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.499438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.508063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.529238][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.540600][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.551067][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.562077][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.572071][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.583302][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.593517][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.604139][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.615016][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.623204][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.634551][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.643461][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.656142][ T8854] device veth0_vlan entered promiscuous mode [ 371.665607][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.674215][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.682107][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.698262][ T8854] device veth1_vlan entered promiscuous mode [ 371.705251][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.724213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.733020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.764947][ T8854] device veth0_macvtap entered promiscuous mode [ 371.776640][ T8854] device veth1_macvtap entered promiscuous mode [ 371.791392][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.802855][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.813157][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.823965][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.834474][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.845516][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.855509][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.866097][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.875958][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 371.886531][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.897890][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.906441][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.915306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.923688][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.932675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.944631][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.955329][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.965442][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.976127][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.986232][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 371.997382][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.007253][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.017749][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.027792][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 372.038259][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.049297][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.060385][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.069475][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.250245][ T27] audit: type=1800 audit(1580299964.373:56): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16691 res=0 [ 372.376855][ T27] audit: type=1800 audit(1580299964.503:57): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16691 res=0 [ 372.404306][ T27] audit: type=1800 audit(1580299964.533:58): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16691 res=0 12:12:44 executing program 0: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 12:12:44 executing program 1: syz_read_part_table(0x80000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a6ffffff0a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 12:12:44 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) 12:12:44 executing program 5: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) signalfd(r2, &(0x7f00000000c0), 0x8) 12:12:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1007fffffff, 0x0, 0x0, 0x2}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) timerfd_create(0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) getpgid(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:12:44 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) [ 372.752947][ T8880] IPVS: ftp: loaded support on port[0] = 21 [ 372.812654][ T8890] loop1: p1 p2 < > p3 p4 < p5 p6 > [ 372.818321][ T8890] loop1: p1 size 11290111 extends beyond EOD, truncated [ 372.843801][ T8890] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 372.856592][ T8890] loop1: p5 size 11290111 extends beyond EOD, truncated [ 372.865585][ T8890] loop1: p6 size 1912633224 extends beyond EOD, truncated 12:12:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 12:12:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) [ 373.120083][ T8890] loop1: p1 p2 < > p3 p4 < p5 p6 > [ 373.134828][ T8890] loop1: p1 size 11290111 extends beyond EOD, truncated [ 373.152619][ T8890] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 373.212131][ T8890] loop1: p5 size 11290111 extends beyond EOD, truncated 12:12:45 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa126c1210b29017b83c8e96e6405f7e93dba4d64b5030b3388814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b066261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848553382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cb774879b0871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28ad"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x492, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xb4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0xc) fcntl$lock(r2, 0x6, &(0x7f0000000340)) [ 373.261962][ T27] audit: type=1800 audit(1580299965.393:59): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16673 res=0 [ 373.284616][ T8890] loop1: p6 size 1912633224 extends beyond EOD, truncated [ 373.386788][ T27] audit: type=1800 audit(1580299965.513:60): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16673 res=0 12:12:45 executing program 0: syz_read_part_table(0x80000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a9ffffff0a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 12:12:45 executing program 1: syz_read_part_table(0x80000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a6ffffff0a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 373.439050][ T27] audit: type=1800 audit(1580299965.533:61): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16673 res=0 [ 373.537886][ T8884] IPVS: ftp: loaded support on port[0] = 21 12:12:45 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) [ 373.593925][ T8929] loop0: p1 p2 < > p3 p4 < p5 p6 > [ 373.631368][ T556] tipc: TX() has been purged, node left! [ 373.633001][ T8929] loop0: p1 size 11290111 extends beyond EOD, truncated [ 373.660184][ T8929] loop0: p3 size 1912633224 extends beyond EOD, truncated 12:12:45 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa126c1210b29017b83c8e96e6405f7e93dba4d64b5030b3388814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b066261ef487a4d26342c94f56a39359ba56724e4535d80ffbd6848553382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cb774879b0871dd71703eefe87d7919c5ea2a361b18cca1a363b2b28ad"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x492, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xb4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r1}, 0xc) fcntl$lock(r2, 0x6, &(0x7f0000000340)) 12:12:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1007fffffff, 0x0, 0x0, 0x2}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) timerfd_create(0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) getpgid(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 373.675479][ T8929] loop0: p5 size 11290111 extends beyond EOD, truncated [ 373.694272][ T8929] loop0: p6 size 1912633224 extends beyond EOD, truncated [ 373.803677][ T8935] IPVS: ftp: loaded support on port[0] = 21 [ 373.875043][ T8940] loop1: p1 p2 < > p3 p4 < p5 p6 > [ 373.889279][ T8940] loop1: p1 size 11290111 extends beyond EOD, truncated [ 373.906326][ T8940] loop1: p3 size 1912633224 extends beyond EOD, truncated 12:12:46 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="020181ffffff0a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 373.928835][ T8940] loop1: p5 size 11290111 extends beyond EOD, truncated [ 373.940122][ T8929] loop0: p1 p2 < > p3 p4 < p5 p6 > 12:12:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) [ 374.001358][ T8929] loop0: p1 size 11290111 extends beyond EOD, truncated [ 374.018740][ T8929] loop0: p3 size 1912633224 extends beyond EOD, truncated [ 374.029029][ T8940] loop1: p6 size 1912633224 extends beyond EOD, truncated [ 374.044669][ T8929] loop0: p5 size 11290111 extends beyond EOD, truncated [ 374.082099][ T8929] loop0: p5 could not be added: 12 [ 374.098023][ T8929] loop0: p6 size 1912633224 extends beyond EOD, truncated 12:12:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 12:12:46 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 374.291578][ T8955] loop5: p1 p2 < > p3 p4 < p5 p6 > [ 374.304721][ T8955] loop5: partition table partially beyond EOD, truncated [ 374.351311][ T27] audit: type=1800 audit(1580299966.473:62): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16687 res=0 [ 374.378997][ T8955] loop5: p1 start 10 is beyond EOD, truncated 12:12:46 executing program 3: sched_setattr(0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) r0 = socket(0x10, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000003a40)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, r3]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r4, r6) r7 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0xffffffffffffffff) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r8, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000003ac0)) [ 374.513573][ T8955] loop5: p2 start 25 is beyond EOD, truncated [ 374.528622][ T8955] loop5: p3 start 225 is beyond EOD, truncated [ 374.540647][ T27] audit: type=1800 audit(1580299966.583:63): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16687 res=0 [ 374.595291][ T8955] loop5: p4 size 2 extends beyond EOD, truncated [ 374.664176][ T8955] loop5: p5 start 10 is beyond EOD, truncated 12:12:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1007fffffff, 0x0, 0x0, 0x2}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) timerfd_create(0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) getpgid(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 374.710231][ T8955] loop5: p6 start 225 is beyond EOD, truncated [ 374.773203][ T27] audit: type=1800 audit(1580299966.593:64): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16687 res=0 [ 374.923423][ T8955] loop5: p1 p2 < > p3 p4 < p5 p6 > [ 374.942987][ T8955] loop5: partition table partially beyond EOD, truncated [ 374.957664][ T8981] IPVS: ftp: loaded support on port[0] = 21 [ 374.965149][ T8955] loop5: p1 start 10 is beyond EOD, truncated [ 374.991392][ T8955] loop5: p2 start 25 is beyond EOD, truncated [ 375.086403][ T8955] loop5: p3 start 225 is beyond EOD, truncated 12:12:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 375.181374][ T8955] loop5: p4 size 2 extends beyond EOD, truncated [ 375.221314][ T8955] loop5: p5 start 10 is beyond EOD, truncated [ 375.267455][ T8955] loop5: p6 start 225 is beyond EOD, truncated 12:12:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 12:12:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 375.628444][ T27] audit: type=1800 audit(1580299967.753:65): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16513 res=0 12:12:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000580), 0xefee) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}, 0xa0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r6 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f00000002c0)={0x1, 0x50cc7cc1207bc2eb, 0x1000, 0x1000, &(0x7f0000001580)="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", 0x6b, 0x0, &(0x7f0000000140)="57fcc966c8d9e54fb129b849150a10d703697ccfd0914433b972bdadbc2b75227f2036f54f31150bb469c376494d619ae7b3ef275608ec457d533cf68c524d746b55eab3df1aee30d04917ee15855c0c704ef70c1cf63058cc58319a19fbf69aeecc6ce2f86c226a7c6b83"}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) keyctl$get_keyring_id(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4693fc77de3a4aa7f7b313d39ef6c39b3b782013f7a3", @ANYRES32, @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x3}}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:12:48 executing program 4: syz_read_part_table(0x80000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="020185ffffff0a000000ff45ac0000ffffff8500e931190000000000004000ffffffbf000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 376.231344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.237244][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 376.282674][ T9038] loop4: p1 < > p2 < > p3 p4 < p5 > [ 376.344120][ T9038] loop4: p3 size 1912633224 extends beyond EOD, truncated 12:12:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 376.446766][ T9038] loop4: p5 size 1912633224 extends beyond EOD, truncated [ 376.631371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.637175][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 376.711324][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.717201][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:12:48 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) [ 376.806025][ T9038] loop4: p1 < > p2 < > p3 p4 < p5 > [ 376.815841][ T9038] loop4: p3 size 1912633224 extends beyond EOD, truncated 12:12:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x5, 0x0, 0xfa, 0xfffffffffffffffc, 0x0, 0x1000}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x40, 0x5, 0x5, 0x0, 0xfffffffffffffff7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) dup(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffb) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) statx(0xffffffffffffffff, 0x0, 0x0, 0x14d9f47d5e1079f3, &(0x7f000000c940)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 376.918810][ T9038] loop4: p5 size 1912633224 extends beyond EOD, truncated 12:12:49 executing program 1: r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x3, &(0x7f0000000080)='mqueue\x00', &(0x7f00000000c0)='./file0\x00', r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mqueue\x00', &(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='ppp1[\x00', &(0x7f0000000280)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='&em0wlan1-\x00', &(0x7f0000000380)='bdevtrusted\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='/dev/audio\x00', &(0x7f0000000200)='/dev/audio\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='bdevtrusted\x00', &(0x7f0000000180)='ppp1[\x00', 0x0) dup3(r1, r0, 0x0) [ 377.055274][ T9067] IPVS: ftp: loaded support on port[0] = 21 12:12:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200100c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x44000) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) shutdown(r1, 0x0) [ 377.438085][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 377.438105][ T27] audit: type=1804 audit(1580299969.563:71): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir446993943/syzkaller.UrVXHy/43/bus" dev="sda1" ino=16685 res=1 [ 377.532848][ T27] audit: type=1804 audit(1580299969.593:72): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir446993943/syzkaller.UrVXHy/43/bus" dev="sda1" ino=16685 res=1 [ 377.798779][ T9069] IPVS: ftp: loaded support on port[0] = 21 [ 377.894881][ T556] tipc: TX() has been purged, node left! [ 377.901133][ T556] tipc: TX() has been purged, node left! [ 377.919816][ T556] tipc: TX() has been purged, node left! 12:12:51 executing program 3: sched_setattr(0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) r0 = socket(0x10, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000003a40)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, r3]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r4, r6) r7 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0xffffffffffffffff) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r8, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000003ac0)) 12:12:51 executing program 4: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) r1 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RSTAT(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r2, r3) dup2(r4, r0) r5 = gettid() tkill(r5, 0x1000000000016) 12:12:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={0x0}}, 0x0) 12:12:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:12:51 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) 12:12:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 12:12:51 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}], 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) [ 379.215104][ T27] audit: type=1800 audit(1580299971.343:73): pid=9126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16491 res=0 12:12:51 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) [ 379.287364][ T9124] IPVS: ftp: loaded support on port[0] = 21 [ 379.336002][ T27] audit: type=1800 audit(1580299971.443:74): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16491 res=0 [ 379.514294][ T27] audit: type=1800 audit(1580299971.453:75): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16491 res=0 [ 379.521440][ T9133] IPVS: ftp: loaded support on port[0] = 21 [ 379.541529][ T9142] IPVS: ftp: loaded support on port[0] = 21 [ 379.716801][ T9147] IPVS: ftp: loaded support on port[0] = 21 [ 379.842259][ T9150] IPVS: ftp: loaded support on port[0] = 21 12:12:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) [ 380.252604][ T27] audit: type=1800 audit(1580299972.383:76): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16692 res=0 [ 380.383110][ T27] audit: type=1800 audit(1580299972.513:77): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16692 res=0 [ 380.465767][ T9162] IPVS: ftp: loaded support on port[0] = 21 [ 380.486291][ T27] audit: type=1800 audit(1580299972.533:78): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16692 res=0 12:12:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9a4c9f20e681a65f981de6e8cd5eec1ea398c0216ec35e333843d7a6224ed04e9daa1e49a2441d018d82f295e7f7654ac68bb14a75e265a1619acf6bdadf2e84cf85c26ce0129669cae978820869da55c973c4b3bcec1a830a28ccaf1a6874aa03f727cb4d6c6ea644e7711e1508a8422297c9661342d44d0048145a119a596c2e37345960188adbbe63620f6b6c13c7af01d3221cb9824e0d1bcb65d7f37ab7bfe9c47ac1b2e1b94f354cfbcfc8a416b46a3210985ed336732eba1a07317e98f23b464c9a60d1b875bb2ef421b135824c2e7e8bc974f7680f2505b908e571cab40e5ce3f8f5af5dcf1e3bdd1f2f88658483e6781cff0d8f2580d30d65a5ca48299d979b330801f4c801041d0d2413f23b1cc1f4120d320533cbdc0d069394cae50c53782dbeb0818a66c6e8b06f56441841ec5df65f39", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) [ 381.296906][ T27] audit: type=1800 audit(1580299973.423:79): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16692 res=0 [ 381.403800][ T27] audit: type=1800 audit(1580299973.533:80): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16692 res=0 [ 381.991771][ T556] tipc: TX() has been purged, node left! 12:12:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) [ 382.304592][ T556] tipc: TX() has been purged, node left! [ 382.451310][ T556] tipc: TX() has been purged, node left! [ 382.464793][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 382.464811][ T27] audit: type=1800 audit(1580299974.593:82): pid=9197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16692 res=0 [ 382.601822][ T27] audit: type=1800 audit(1580299974.733:83): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16692 res=0 [ 382.631768][ T556] tipc: TX() has been purged, node left! [ 382.764012][ T27] audit: type=1800 audit(1580299974.753:84): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16692 res=0 12:12:55 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}], 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003ac0)) [ 383.291241][ T9205] IPVS: ftp: loaded support on port[0] = 21 [ 383.546911][ T9209] IPVS: ftp: loaded support on port[0] = 21 [ 384.094806][ T9209] chnl_net:caif_netlink_parms(): no params data found [ 384.263769][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.270990][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.315609][ T9209] device bridge_slave_0 entered promiscuous mode [ 384.473540][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.490947][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.511253][ T9209] device bridge_slave_1 entered promiscuous mode [ 384.669298][ T9209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.866514][ T9209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.897608][ T556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.929202][ T556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.958598][ T556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.986979][ T556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.999422][ T556] device bridge_slave_1 left promiscuous mode [ 385.021554][ T556] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.086355][ T556] device bridge_slave_0 left promiscuous mode [ 385.105157][ T556] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.154792][ T556] device veth1_macvtap left promiscuous mode [ 385.171169][ T556] device veth0_macvtap left promiscuous mode [ 385.181645][ T556] device veth1_vlan left promiscuous mode [ 385.187411][ T556] device veth0_vlan left promiscuous mode 12:12:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9ff00", 0x14, 0x11, 0x0, @remote, @local, {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) accept4(r0, &(0x7f0000000540)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @null, @null, @rose, @null, @bcast, @netrom]}, &(0x7f00000005c0)=0x80, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000640)='SEG6\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x144, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x23}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbea2}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x33a5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8c68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) 12:12:57 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) 12:12:57 executing program 3: sched_setattr(0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) r0 = socket(0x10, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000003a40)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, r3]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, r4, r6) r7 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0xffffffffffffffff) r8 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r8, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000003ac0)) [ 385.459063][ T9226] IPVS: ftp: loaded support on port[0] = 21 [ 385.467890][ T9225] IPVS: ftp: loaded support on port[0] = 21 [ 387.201645][ T556] device hsr_slave_0 left promiscuous mode [ 387.241448][ T556] device hsr_slave_1 left promiscuous mode [ 387.303742][ T556] team0 (unregistering): Port device team_slave_1 removed [ 387.314943][ T556] team0 (unregistering): Port device team_slave_0 removed [ 387.325143][ T556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.365373][ T556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.456031][ T556] bond0 (unregistering): Released all slaves [ 387.672212][ T9209] team0: Port device team_slave_0 added [ 387.678903][ T9209] team0: Port device team_slave_1 added [ 387.717649][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.732677][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.786163][ T9209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.934641][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.954659][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.001973][ T9209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.193443][ T9209] device hsr_slave_0 entered promiscuous mode [ 388.241698][ T9209] device hsr_slave_1 entered promiscuous mode [ 388.446836][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.476419][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.494890][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.508140][ T9209] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.518147][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.530226][ T8670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.539008][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.546123][ T8670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.575622][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.583992][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.596137][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.605256][ T2412] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.612344][ T2412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.623868][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.635641][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.646865][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.656795][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.667812][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.677860][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.689312][ T2412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.702165][ T9209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.717424][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.726295][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.737437][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.746118][ T8074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.764602][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.775521][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.799185][ T9209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.941365][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.950316][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.970471][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 388.979020][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.988872][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.000852][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.010186][ T9209] device veth0_vlan entered promiscuous mode [ 389.026329][ T9209] device veth1_vlan entered promiscuous mode [ 389.049779][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.062093][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.070374][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.082205][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.095858][ T9209] device veth0_macvtap entered promiscuous mode [ 389.105718][ T9209] device veth1_macvtap entered promiscuous mode [ 389.119809][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.130427][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.140597][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.151062][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.161749][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.172323][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.182252][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.193009][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.202898][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.213646][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.225715][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.235139][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.243714][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.252367][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.261298][ T8675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.271948][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.282750][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.292818][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.303370][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.313306][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.323844][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.333848][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.344398][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.354292][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.365182][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.376222][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.384506][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.393553][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:13:01 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r0, r1) getsockname$inet6(r1, 0x0, &(0x7f0000006bc0)) 12:13:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) sendfile(r10, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r10, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:01 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000000000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e6574706369300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000580)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ac1ea5", 0x34, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "e41ace", 0x0, 0x84, 0x0, @remote, @mcast2, [], "c483ce66"}}}}}}}, 0x0) 12:13:01 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) 12:13:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x12, 0x0, &(0x7f0000000000)) 12:13:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000040), 0x4) [ 389.572546][ T9253] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 389.595663][ T9253] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 12:13:01 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 389.677420][ T27] audit: type=1800 audit(1580299981.803:85): pid=9268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16759 res=0 [ 389.709947][ T9267] IPVS: ftp: loaded support on port[0] = 21 12:13:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffff9f) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 12:13:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f00000003c0)=[{}, {}, {0x5}]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x403, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x403, 0x0, 0x22d}, 0x28) [ 389.771465][ T556] tipc: TX() has been purged, node left! [ 389.775159][ T556] tipc: TX() has been purged, node left! [ 389.819423][ T27] audit: type=1800 audit(1580299981.943:86): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16759 res=0 [ 389.834250][ T27] audit: type=1800 audit(1580299981.963:87): pid=9268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16759 res=0 12:13:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x403, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x403, 0x0, 0x22d}, 0x28) 12:13:02 executing program 0: gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632977", 0x0, 0x100, 0x6000000000000000}, 0x28) 12:13:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffff9f) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 12:13:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) sendfile(r10, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r10, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9a4c9f20e681a65f981de6e8cd5eec1ea398c0216ec35e333843d7a6224ed04e9daa1e49a2441d018d82f295e7f7654ac68bb14a75e265a1619acf6bdadf2e84cf85c26ce0129669cae978820869da55c973c4b3bcec1a830a28ccaf1a6874aa03f727cb4d6c6ea644e7711e1508a8422297c9661342d44d0048145a119a596c2e37345960188adbbe63620f6b6c13c7af01d3221cb9824e0d1bcb65d7f37ab7bfe9c47ac1b2e1b94f354cfbcfc8a416b46a3210985ed336732eba1a07317e98f23b464c9a60d1b875bb2ef421b135824c2e7e8bc974f7680f2505b908e571cab40e5ce3f8f5af5dcf1e3bdd1f2f88658483e6781cff0d8f2580d30d65a5ca48299d979b330801f4c801041d0d2413f23b1cc1f4120d320533cbdc0d069394cae50c53782dbeb0818a66c6e8b06f56441841ec5df65f39", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:02 executing program 1: sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) creat(0x0, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) 12:13:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f00000003c0)=[{}, {}, {0x5}]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x403, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x403, 0x0, 0x22d}, 0x28) 12:13:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002dc0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xb}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}]}}]}, 0x50}}, 0x0) [ 390.829627][ T27] audit: type=1800 audit(1580299982.953:88): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16763 res=0 [ 390.907559][ T9309] IPVS: ftp: loaded support on port[0] = 21 12:13:03 executing program 0: gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632977", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 390.947069][ T27] audit: type=1800 audit(1580299983.063:89): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16763 res=0 12:13:03 executing program 5: socket$inet6(0xa, 0x0, 0x6b) unshare(0x6c060000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001200)={'lo\x00', {0x2, 0x0, @empty}}) [ 391.096393][ T27] audit: type=1800 audit(1580299983.073:90): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16763 res=0 12:13:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x601, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "b6167c7e0e47d0e8"}, 0x1}}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 391.466796][ T9330] IPVS: ftp: loaded support on port[0] = 21 12:13:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r8, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) sendfile(r10, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r10, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:04 executing program 1: socket$inet6(0xa, 0x0, 0xffff) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x2, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000400)=""/128) 12:13:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f09a142259e3390bf809d4e10e", 0xd}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@broadcast}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @remote, @dev, @rand_addr]}]}}}], 0x58}, 0x0) recvmsg$kcm(r2, &(0x7f0000005c40)={&(0x7f00000029c0)=@xdp, 0x80, &(0x7f0000004c00)=[{&(0x7f0000002a40)=""/168, 0xa8}], 0x1}, 0x0) [ 391.849374][ T27] audit: type=1800 audit(1580299983.973:91): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16769 res=0 [ 391.955081][ T27] audit: type=1800 audit(1580299984.083:92): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16769 res=0 [ 392.075037][ T27] audit: type=1800 audit(1580299984.113:93): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16769 res=0 12:13:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) [ 392.121543][ T9347] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f00000003c0)=[{}, {}, {0x5}]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x403, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x403, 0x0, 0x22d}, 0x28) 12:13:04 executing program 1: socket$inet6(0xa, 0x0, 0xffff) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x2, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000400)=""/128) 12:13:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000380)=[@request_death={0x40046304, 0x0, 0x40046306}], 0x0, 0x0, 0x0}) 12:13:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9a4c9f20e681a65f981de6e8cd5eec1ea398c0216ec35e333843d7a6224ed04e9daa1e49a2441d018d82f295e7f7654ac68bb14a75e265a1619acf6bdadf2e84cf85c26ce0129669cae978820869da55c973c4b3bcec1a830a28ccaf1a6874aa03f727cb4d6c6ea644e7711e1508a8422297c9661342d44d0048145a119a596c2e37345960188adbbe63620f6b6c13c7af01d3221cb9824e0d1bcb65d7f37ab7bfe9c47ac1b2e1b94f354cfbcfc8a416b46a3210985ed336732eba1a07317e98f23b464c9a60d1b875bb2ef421b135824c2e7e8bc974f7680f2505b908e571cab40e5ce3f8f5af5dcf1e3bdd1f2f88658483e6781cff0d8f2580d30d65a5ca48299d979b330801f4c801041d0d2413f23b1cc1f4120d320533cbdc0d069394cae50c53782dbeb0818a66c6e8b06f56441841ec5df65f39", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:04 executing program 5: socket$inet6(0xa, 0x0, 0x6b) unshare(0x6c060000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001200)={'lo\x00', {0x2, 0x0, @empty}}) [ 392.625957][ T9369] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:13:04 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) mknod(&(0x7f0000000100)='./bus\x00', 0x80008002, 0x500) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 12:13:04 executing program 3: mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) [ 392.746504][ T8065] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 392.846698][ T27] audit: type=1804 audit(1580299984.973:94): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir246951153/syzkaller.3vaNbR/15/file0/file0" dev="loop4" ino=32 res=1 [ 392.864605][ T9382] IPVS: ftp: loaded support on port[0] = 21 12:13:05 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000000119050000000000000000000000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe800000f0ffffff00000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff00000c000000000000000000000001080007000000000024000f0014000100080001007f0002007f0000010c0002000500010000000000"], 0xb8}}, 0x0) [ 392.900468][ T9381] debugfs: File '9371' in directory 'proc' already present! 12:13:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) [ 393.037097][ T9393] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 393.045572][ T9393] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 12:13:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000380)=[@request_death={0x40046304, 0x0, 0x40046306}], 0x0, 0x0, 0x0}) 12:13:05 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="070c5929df5d3023f8dc583edcc996b9"], 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 393.320838][ T9409] debugfs: File '9404' in directory 'proc' already present! 12:13:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:13:05 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='\a'], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) 12:13:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:06 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="070c5929df5d3023f8dc583edcc996b9"], 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 12:13:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:13:06 executing program 5: socket$inet6(0xa, 0x0, 0x6b) unshare(0x6c060000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001200)={'lo\x00', {0x2, 0x0, @empty}}) 12:13:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) [ 394.357936][ T9450] IPVS: ftp: loaded support on port[0] = 21 12:13:06 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="070c5929df5d3023f8dc583edcc996b9"], 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 12:13:06 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="070c5929df5d3023f8dc583edcc996b9"], 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 12:13:06 executing program 0: syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) inotify_init() openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 12:13:06 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='\a'], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) 12:13:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 394.752747][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 394.752771][ T27] audit: type=1804 audit(1580299986.883:107): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir650786380/syzkaller.1OxTIN/46/bus" dev="sda1" ino=16789 res=1 [ 394.980799][ T27] audit: type=1804 audit(1580299987.103:108): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir246951153/syzkaller.3vaNbR/18/bus" dev="sda1" ino=16768 res=1 [ 395.023123][ T556] tipc: TX() has been purged, node left! [ 395.063977][ T27] audit: type=1804 audit(1580299987.133:109): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir971210074/syzkaller.kveq3w/18/bus" dev="sda1" ino=16796 res=1 12:13:07 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) close(r2) socket$kcm(0x29, 0x802, 0x0) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 395.159761][ T27] audit: type=1804 audit(1580299987.223:110): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir246951153/syzkaller.3vaNbR/18/bus" dev="sda1" ino=16768 res=1 12:13:07 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="070c5929df5d3023f8dc583edcc996b9"], 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 395.211399][ T556] tipc: TX() has been purged, node left! [ 395.331343][ T27] audit: type=1800 audit(1580299987.323:111): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16801 res=0 [ 395.374645][ T556] tipc: TX() has been purged, node left! [ 395.427893][ T27] audit: type=1800 audit(1580299987.433:112): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16801 res=0 12:13:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 395.508287][ T27] audit: type=1800 audit(1580299987.443:113): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16801 res=0 [ 395.571496][ T556] tipc: TX() has been purged, node left! [ 395.596930][ T27] audit: type=1804 audit(1580299987.623:114): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir170354034/syzkaller.AnGfgm/46/bus" dev="sda1" ino=16802 res=1 12:13:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000000)="7fbb", 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000000)) [ 395.761486][ T556] tipc: TX() has been purged, node left! [ 395.775195][ T27] audit: type=1804 audit(1580299987.723:115): pid=9485 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir170354034/syzkaller.AnGfgm/46/bus" dev="sda1" ino=16802 res=1 12:13:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0xc}, 0x435, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 395.857333][ T27] audit: type=1804 audit(1580299987.933:116): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir971210074/syzkaller.kveq3w/18/bus" dev="sda1" ino=16796 res=1 12:13:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:08 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='\a'], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) 12:13:08 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='\a'], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) 12:13:08 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x3800) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="070c5929df5d3023f8dc583edcc996b9"], 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) 12:13:08 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="72610a09000000000000000600000000000000000000000000000000000000000200000003000000200300000000000090010000000000000000000090010000880200008802000088020000880200008802000003000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000300190010000000000000000000020000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000066736d0000000000000009000000000000000000d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa64cab6b1d2cc0506efeb70b5bc8c2d4be3a94a2d2393e3182f64694d7d05fb478c8f56627a5cfb05d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f80400000080000000000000006000534554000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003500000000000000000000000000000004004a1eb969e1dc6b5700ac1e0001e000000200000000000000006873723000000000000000000000000001043667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000000000000000004006000534554000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000c6c800000000000000000000000028000000000000000000a0000000000000000000000000000000000000000004feffffff"], 0x1) 12:13:08 executing program 0: pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000013c0), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write(r0, &(0x7f0000001240)="1e54235b716b97e803443da1f262d2ab4355de5fe646ec2029ae2c10d96a425111fd38cd613bd0025b0191e669ebf9a7bc5cd373197fd78212d304698b7a3229a12ab3e0d9e0aca0474db1c06d6fab66ddf37e6a39978fa5df61e25c7557708227a675ab5613a79e0acfccf2161029f01ff9f2053352e4f156465629cf8671475606aac540916af2c2ae91efe9f4ede7964619377bec8f9b3209bcfdf971f2b02c79eec57425dac1ade03c5ce494ebf5044e5dd48b5648acd8d2c8972a87007cdf85c8f7da7549d0ae91282a3af3a51f120cc5c9d17ba8c7fd39", 0xda) write(r0, &(0x7f0000000300)="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", 0xf27) 12:13:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) readv(r2, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x62}, {&(0x7f00000005c0)=""/5, 0x5}, {0x0, 0x3a}, {0x0}, {0x0}, {0x0}], 0x100000000000000e) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x242483cd, 0x0, 0x0, 0x800e007f9) shutdown(r3, 0x0) poll(0x0, 0x0, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(0xffffffffffffffff, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r5 = socket$inet6_sctp(0x1c, 0x1, 0x84) listen(r5, 0x0) accept$inet6(r5, 0x0, 0x0) shutdown(r4, 0x0) 12:13:08 executing program 3: shmget(0x3, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) [ 396.505467][ T9520] Cannot find add_set index 0 as target 12:13:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000002940)='/dev/md0\x00', 0x0, 0x0) 12:13:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000300)={0x20, r1, 0x205, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 12:13:09 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) 12:13:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:09 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)="e9", 0x1, 0x800, 0x0, 0x0) 12:13:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 12:13:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800070080004008"], 0x3c}}, 0x0) 12:13:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r2, 0x2) 12:13:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x58) listen(r0, 0x0) 12:13:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x158, 0x158, 0x0, 0x0, 0x248, 0x248, 0x248, 0x248, 0x248, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, [], [], 'veth0_to_bond\x00', 'netdevsim0\x00'}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 12:13:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) [ 397.755196][ T9576] bond2 (uninitialized): Released all slaves 12:13:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800070080004008"], 0x3c}}, 0x0) [ 397.946342][ T9583] xt_CT: You must specify a L4 protocol and not use inversions on it 12:13:10 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) dup3(r2, r0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) [ 398.171478][ T9594] bond2 (uninitialized): Released all slaves 12:13:10 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 12:13:10 executing program 1: 12:13:10 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) 12:13:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = dup2(r0, r1) ioctl$TIOCGETD(r2, 0x5452, &(0x7f00000000c0)) 12:13:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) 12:13:10 executing program 3: 12:13:10 executing program 3: [ 398.784748][ T8054] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 12:13:11 executing program 4: [ 398.834241][ T8054] FAT-fs (loop1): Filesystem has been set read-only 12:13:11 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$void(r0, 0x5450) 12:13:11 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) dup3(r2, r0, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 12:13:11 executing program 3: 12:13:11 executing program 4: 12:13:11 executing program 1: 12:13:11 executing program 5: 12:13:11 executing program 3: 12:13:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="036b6fc27d6527a23bcedd010000000000000008001b0000000b006f92d9a72d01dcb8c0bfe629f176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a366c02fd0623ca2c8095d57380966886a187c8f384285557bcf7de3a918952a592707830a344e251f58feaadc506bfca62b319a0eac8b2532edd37c37ba397b36a1fe1f2c529f014c44fc20c1d266c0360"], 0x3}}, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:11 executing program 1: 12:13:11 executing program 0: 12:13:11 executing program 5: 12:13:11 executing program 4: 12:13:11 executing program 3: 12:13:11 executing program 1: 12:13:11 executing program 5: 12:13:11 executing program 4: 12:13:11 executing program 0: 12:13:12 executing program 3: 12:13:12 executing program 4: [ 399.965091][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 399.965166][ T27] audit: type=1800 audit(1580299992.093:130): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16827 res=0 [ 400.093251][ T27] audit: type=1800 audit(1580299992.193:131): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16827 res=0 [ 400.180474][ T27] audit: type=1800 audit(1580299992.213:132): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16827 res=0 12:13:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:12 executing program 0: 12:13:12 executing program 1: 12:13:12 executing program 4: 12:13:12 executing program 5: 12:13:12 executing program 3: 12:13:12 executing program 3: 12:13:12 executing program 5: 12:13:12 executing program 0: 12:13:12 executing program 4: 12:13:13 executing program 1: [ 401.018302][ T27] audit: type=1800 audit(1580299993.143:133): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16842 res=0 12:13:13 executing program 0: [ 401.142994][ T27] audit: type=1800 audit(1580299993.273:134): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16842 res=0 [ 401.244803][ T27] audit: type=1800 audit(1580299993.293:135): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16842 res=0 12:13:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:13 executing program 3: 12:13:13 executing program 5: 12:13:13 executing program 4: 12:13:13 executing program 1: 12:13:13 executing program 0: 12:13:13 executing program 1: 12:13:14 executing program 3: 12:13:14 executing program 5: 12:13:14 executing program 0: 12:13:14 executing program 4: 12:13:14 executing program 1: [ 402.026460][ T27] audit: type=1800 audit(1580299994.153:136): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16832 res=0 [ 402.133970][ T27] audit: type=1800 audit(1580299994.263:137): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16832 res=0 [ 402.208947][ T27] audit: type=1800 audit(1580299994.293:138): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16832 res=0 12:13:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:14 executing program 1: 12:13:14 executing program 3: 12:13:14 executing program 5: 12:13:14 executing program 4: 12:13:14 executing program 0: 12:13:15 executing program 0: 12:13:15 executing program 1: 12:13:15 executing program 5: 12:13:15 executing program 3: 12:13:15 executing program 4: [ 403.045363][ T27] audit: type=1800 audit(1580299995.173:139): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16838 res=0 12:13:15 executing program 4: 12:13:15 executing program 3: 12:13:15 executing program 0: 12:13:15 executing program 1: 12:13:15 executing program 5: 12:13:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:15 executing program 4: 12:13:15 executing program 5: 12:13:15 executing program 0: 12:13:16 executing program 4: 12:13:16 executing program 3: 12:13:16 executing program 1: 12:13:16 executing program 4: 12:13:16 executing program 3: 12:13:16 executing program 0: 12:13:16 executing program 5: 12:13:16 executing program 1: 12:13:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:16 executing program 4: 12:13:16 executing program 3: 12:13:16 executing program 0: 12:13:16 executing program 5: 12:13:16 executing program 1: 12:13:17 executing program 4: 12:13:17 executing program 3: 12:13:17 executing program 5: 12:13:17 executing program 0: 12:13:17 executing program 1: [ 405.047409][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 405.047427][ T27] audit: type=1800 audit(1580299997.173:145): pid=9826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16850 res=0 12:13:17 executing program 5: [ 405.162981][ T27] audit: type=1800 audit(1580299997.273:146): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16850 res=0 [ 405.252975][ T27] audit: type=1800 audit(1580299997.283:147): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16850 res=0 12:13:17 executing program 4: 12:13:17 executing program 1: 12:13:17 executing program 3: 12:13:17 executing program 0: 12:13:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:17 executing program 5: 12:13:17 executing program 1: 12:13:18 executing program 3: 12:13:18 executing program 0: 12:13:18 executing program 5: 12:13:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x280900) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(r6, 0x0, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) open(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') 12:13:18 executing program 4: [ 406.060897][ T27] audit: type=1800 audit(1580299998.183:148): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16513 res=0 12:13:18 executing program 0: [ 406.191432][ T27] audit: type=1800 audit(1580299998.283:149): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16513 res=0 12:13:18 executing program 3: [ 406.284129][ T27] audit: type=1800 audit(1580299998.303:150): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16513 res=0 12:13:18 executing program 5: 12:13:18 executing program 4: [ 406.382202][ T27] audit: type=1800 audit(1580299998.353:151): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16801 res=0 [ 406.485194][ T27] audit: type=1804 audit(1580299998.403:152): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir650786380/syzkaller.1OxTIN/69/bus" dev="sda1" ino=16801 res=1 [ 406.606812][ T27] audit: type=1804 audit(1580299998.403:153): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir650786380/syzkaller.1OxTIN/69/bus" dev="sda1" ino=16801 res=1 12:13:18 executing program 3: 12:13:18 executing program 0: 12:13:18 executing program 5: 12:13:18 executing program 4: 12:13:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:19 executing program 0: 12:13:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x280900) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(r6, 0x0, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) open(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') 12:13:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x280900) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(r6, 0x0, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) open(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(0x0, &(0x7f0000000340)='./file0\x00') 12:13:19 executing program 4: 12:13:19 executing program 5: 12:13:19 executing program 0: [ 407.139936][ T27] audit: type=1800 audit(1580299999.263:154): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16689 res=0 12:13:19 executing program 4: 12:13:19 executing program 0: 12:13:19 executing program 5: 12:13:19 executing program 4: 12:13:19 executing program 0: 12:13:19 executing program 4: 12:13:19 executing program 5: 12:13:20 executing program 1: 12:13:20 executing program 3: 12:13:20 executing program 0: 12:13:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:20 executing program 5: 12:13:20 executing program 4: 12:13:20 executing program 1: 12:13:20 executing program 5: 12:13:20 executing program 0: 12:13:20 executing program 4: 12:13:20 executing program 3: 12:13:20 executing program 1: 12:13:20 executing program 5: 12:13:20 executing program 0: 12:13:20 executing program 4: 12:13:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:21 executing program 3: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x400) 12:13:21 executing program 5: 12:13:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050006004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005100)=@newtfilter={0x24, 0x2c, 0xd07, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 12:13:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendto$packet(r2, &(0x7f0000000180)="ff", 0x1, 0x0, 0x0, 0x0) 12:13:21 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) 12:13:21 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) inotify_init1(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x80000001]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) syz_open_dev$sndseq(0x0, 0x0, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff}) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x5, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) clock_gettime(0x0, &(0x7f0000000080)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @broadcast}, &(0x7f00000001c0)=0xc) [ 409.080488][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:13:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/568]}}], 0x400000000000056, 0x40) 12:13:21 executing program 1: 12:13:21 executing program 0: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:13:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000004e00)='attr/current\x00') 12:13:21 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000140)="266426650f38f1b9fb4a36660feeb600580fc7590f0f009f04002e670f01c90f070f01cbddc7ba4300ed66b9c30d000066b80000c0fe66ba000000000f30", 0x3e}], 0x27e, 0x0, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="c02200002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x22c0}}, 0x0) 12:13:22 executing program 0: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000140)="266426650f38f1b9fb4a36660feeb600580fc7590f0f009f04002e670f01c90f070f01cbddc7ba4300ed66b9c30d000066b80000c0fe66ba000000000f30", 0x3e}], 0x27e, 0x0, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000004e00)='attr/current\x00') 12:13:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:22 executing program 5: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000140)="266426650f38f1b9fb4a36660feeb600580fc7590f0f009f04002e670f01c90f070f01cbddc7ba4300ed66b9c30d000066b80000c0fe66ba000000000f30", 0x3e}], 0x27e, 0x0, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:22 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00bf000200037c"], 0x7) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) 12:13:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chown(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000001200)='fuse\x00', 0x0, &(0x7f0000001380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read'}}], [{@smackfshat={'smackfshat', 0x3d, 'net/snmp\x00'}}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:22 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) inotify_init1(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x80000001]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) syz_open_dev$sndseq(0x0, 0x0, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff}) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x5, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) clock_gettime(0x0, &(0x7f0000000080)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @broadcast}, &(0x7f00000001c0)=0xc) [ 410.275978][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 410.275996][ T27] audit: type=1800 audit(1580300002.403:169): pid=10039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16689 res=0 12:13:22 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) inotify_init1(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x80000001]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) syz_open_dev$sndseq(0x0, 0x0, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff}) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x5, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) clock_gettime(0x0, &(0x7f0000000080)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @broadcast}, &(0x7f00000001c0)=0xc) [ 410.454697][ T27] audit: type=1800 audit(1580300002.583:170): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16689 res=0 12:13:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='selinuxwlan0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000600)=ANY=[@ANYBLOB='}'], 0x1) sendfile(r3, r3, &(0x7f00000000c0), 0xffffffff) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='K', 0x1}], 0x1, 0x80000001) [ 410.587906][ T27] audit: type=1800 audit(1580300002.623:171): pid=10039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16689 res=0 12:13:22 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/88, 0x58) 12:13:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235210000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x44, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x59, 0xc85d}, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:13:22 executing program 0: chdir(0x0) r0 = memfd_create(&(0x7f00000002c0)='system.snckprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="34c775ccefbbc44b0a03a9e45afc4ef1dc671403ff6aa640797ea9ed66a4f8fdeaef1cd9dfbe93fc6bccc58a45983021e94740c305368b8d23d36b64dd8165ebea25878bfddcb23aff02a78a8da2560890b8f323579e28943ebc6c05f442ec35dc9be3a5688ab4d42567e605d021fdf6b8ff3137a52dc78b4725f6642a76c7ed"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 12:13:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x550b, 0x0) 12:13:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@broadcast}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}}, {{@in6=@rand_addr="000000000000b800"}, 0x0, @in=@local}}, 0xe4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 411.028378][ T27] audit: type=1804 audit(1580300003.153:172): pid=10074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723836353030303532332F73797A6B616C6C65722E5A4F6F796E4F2F35302F34C775CCEFBBC44B0A03A9E45AFC4EF1DC671403FF6AA640797EA9ED66A4F8FDEAEF1CD9DFBE93FC6BCCC58A45983021E94740C305368B8D23D36B64DD8165EBEA25878BFDDCB23AFF02A78A8DA2560890B8F323579E28943EBC6C05F442EC35DC9BE3A5688AB4D42567E605D021FDF6B8FF3137A52DC78B4725F6642A76C7ED dev="sda1" ino=16877 res=1 [ 411.052346][T10072] kvm [10069]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x186 data 0x21 12:13:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x6}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 411.182212][T10072] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 12:13:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_INFO(0x0, 0x3, 0x0) [ 411.244755][ T27] audit: type=1804 audit(1580300003.223:173): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723836353030303532332F73797A6B616C6C65722E5A4F6F796E4F2F35302F34C775CCEFBBC44B0A03A9E45AFC4EF1DC671403FF6AA640797EA9ED66A4F8FDEAEF1CD9DFBE93FC6BCCC58A45983021E94740C305368B8D23D36B64DD8165EBEA25878BFDDCB23AFF02A78A8DA2560890B8F323579E28943EBC6C05F442EC35DC9BE3A5688AB4D42567E605D021FDF6B8FF3137A52DC78B4725F6642A76C7ED dev="sda1" ino=16877 res=1 12:13:23 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 12:13:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0x3c}], 0x0, 0x0, 0x0, 0x68) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000000fb], 0x1f004}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x13c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000d29000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) [ 411.557364][ T27] audit: type=1800 audit(1580300003.573:174): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16898 res=0 [ 411.744175][ T27] audit: type=1800 audit(1580300003.673:175): pid=10104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16898 res=0 [ 411.855211][ T27] audit: type=1800 audit(1580300003.713:176): pid=10104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16898 res=0 12:13:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x3}}}, 0x78) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:25 executing program 4: keyctl$setperm(0x5, 0x0, 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:13:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, &(0x7f0000000040)=@l2={0x1f, 0x9}, 0x64) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000002c0), 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @empty}, 0x10) unshare(0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @mss, @window, @sack_perm], 0x4) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r4 = dup(r3) ioctl$TIOCGRS485(r4, 0x542e, 0x0) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f00000003c0)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200005c0, 0x20001094, 0x200010c4], 0x0, &(0x7f0000000100), &(0x7f0000000480)=ANY=[]}, 0x78) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 12:13:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) 12:13:25 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) dup(r2) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:13:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x10, 0x0) 12:13:25 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000000119050000000000000000000000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe800000f0ffffff00000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff00000c000000000000000000000001080007000000000024000f0014000100080001007f0002007f0000010c0002000500010000000000"], 0xb8}}, 0x0) [ 413.921018][ T27] audit: type=1800 audit(1580300006.043:177): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16914 res=0 [ 413.938690][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 413.979610][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.011022][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:13:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x3}}}, 0x78) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 414.033591][ T27] audit: type=1800 audit(1580300006.163:178): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16914 res=0 12:13:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f0000000040), 0xc, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x984}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) [ 414.086894][T10158] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 414.095149][T10158] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:13:26 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 414.199189][T10166] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 12:13:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x801, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) [ 414.266598][T10171] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 12:13:26 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xe6010000) 12:13:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x15) 12:13:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 414.514082][T10183] mmap: syz-executor.1 (10183) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 12:13:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x801, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffc61) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) 12:13:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0) 12:13:26 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') socket$inet(0x2, 0x200000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_ADDRESS={0xc, 0x1, @local}]}, 0x2c}}, 0x0) 12:13:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:26 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) 12:13:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r1 = epoll_create(0x7fffffff) r2 = fcntl$dupfd(r0, 0x0, r1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x500, 0x10, 0xfa00, {0x0}}, 0x18) 12:13:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0xff, 0x1}, 0x20) 12:13:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271b, 0x0, &(0x7f000033bffc)) 12:13:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr="c5c45315ba11396e66880583c9115762"}, 0x1c, 0x0}}], 0x2, 0x0) 12:13:27 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4100000013000100000000000001000007"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x4004800, 0x0, 0xffffff7c) 12:13:27 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x8000000000000200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:13:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66576c65308c02d282c300dcf76acd68e9f5867fe7c0eb8b100576987a7dfaa8a1fed461069ecca85c7d5c0707e8bf"], 0x34) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e0000000065300a39980cfd42119cc4e104f5ca01516e57c3d694000000000000"], 0x24) 12:13:27 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) 12:13:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x128, 0x128, 0x0, 0x0, 0x128, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00'}}, @common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0xe}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 12:13:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 415.490992][T10247] xt_l2tp: wrong L2TP version: 0 12:13:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:13:27 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 12:13:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66576c65308c02d282c300dcf76acd68e9f5867fe7c0eb8b100576987a7dfaa8a1fed461069ecca85c7d5c0707e8bf"], 0x34) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e0000000065300a39980cfd42119cc4e104f5ca01516e57c3d694000000000000"], 0x24) [ 415.757120][T10262] IPVS: ftp: loaded support on port[0] = 21 [ 415.758742][T10260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 415.800742][T10260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 415.808861][T10260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:13:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, &(0x7f0000000040)=@l2={0x1f, 0x9}, 0x64) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000002c0), 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @empty}, 0x10) unshare(0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @mss, @window, @sack_perm], 0x4) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r4 = dup(r3) ioctl$TIOCGRS485(r4, 0x542e, 0x0) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f00000003c0)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200005c0, 0x20001094, 0x200010c4], 0x0, &(0x7f0000000100), &(0x7f0000000480)=ANY=[@ANYBLOB]}, 0x78) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 12:13:28 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xf, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x12) [ 415.896163][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 415.896239][ T27] audit: type=1800 audit(1580300008.023:183): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16933 res=0 12:13:28 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "831a46", 0x8, 0x11, 0x0, @local, @ipv4={[], [], @broadcast}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) [ 416.021603][ T27] audit: type=1800 audit(1580300008.123:184): pid=10273 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16933 res=0 [ 416.119318][ T27] audit: type=1800 audit(1580300008.143:185): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16933 res=0 12:13:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) fchown(r0, r2, 0x0) 12:13:28 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "831a46", 0x8, 0x11, 0x0, @local, @ipv4={[], [], @broadcast}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 12:13:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, &(0x7f0000000040)=@l2={0x1f, 0x9}, 0x64) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000002c0), 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @empty}, 0x10) unshare(0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @mss, @window, @sack_perm], 0x4) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r4 = dup(r3) ioctl$TIOCGRS485(r4, 0x542e, 0x0) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f00000003c0)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200005c0, 0x20001094, 0x200010c4], 0x0, &(0x7f0000000100), &(0x7f0000000480)=ANY=[@ANYBLOB]}, 0x78) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 12:13:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, &(0x7f0000000040)=@l2={0x1f, 0x9}, 0x64) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000002c0), 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @empty}, 0x10) unshare(0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @mss, @window, @sack_perm], 0x4) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r4 = dup(r3) ioctl$TIOCGRS485(r4, 0x542e, 0x0) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f00000003c0)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200005c0, 0x20001094, 0x200010c4], 0x0, &(0x7f0000000100), &(0x7f0000000480)=ANY=[@ANYBLOB]}, 0x78) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 12:13:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:13:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0x8}, @cipso={0x86, 0xfffffffffffffc96}, @timestamp={0x44, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x0, 0x0, [{0x0, 0x0, "d2e464106edb"}, {0x0, 0x0, "ac89d90f32a480766535cfe3f24356bd"}]}]}}}], 0x20}}], 0x2, 0x0) [ 416.675661][T10266] IPVS: ftp: loaded support on port[0] = 21 12:13:29 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 12:13:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000180)="0503000006003e0000000100c52cf7c25975e605b02f0800eb2b2ff0dac8897c6b118777faffffffe00000000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0) 12:13:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="1bdae52f8f810256f335529510e98b46411650fa37d285e1e486352b98f40fdddf9820252e8e8e5057b41fe97a234dd5ceca7b8f7d6bdb37f303", 0x3a}], 0x1}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r2, 0x0, &(0x7f00000002c0)="6fd30f39ce") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={0x0}) 12:13:29 executing program 3: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x298b0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x35a, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xfffffda0) [ 416.915874][ T27] audit: type=1800 audit(1580300009.043:186): pid=10316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16906 res=0 [ 416.976784][T10323] IPVS: ftp: loaded support on port[0] = 21 [ 417.049404][ T27] audit: type=1800 audit(1580300009.173:187): pid=10316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16906 res=0 [ 417.078961][ T27] audit: type=1800 audit(1580300009.203:188): pid=10316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16906 res=0 [ 417.131355][ T9359] tipc: TX() has been purged, node left! 12:13:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0) 12:13:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:13:29 executing program 3: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x298b0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x35a, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xfffffda0) [ 417.292326][ T9359] tipc: TX() has been purged, node left! 12:13:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:13:29 executing program 3: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x298b0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x35a, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xfffffda0) 12:13:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) r2 = memfd_create(&(0x7f0000000280)='selinuxwlan0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[@ANYBLOB='}'], 0x1) sendfile(r2, r2, &(0x7f00000000c0), 0xffffffff) 12:13:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:29 executing program 3: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x298b0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x35a, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xfffffda0) [ 417.954206][ T27] audit: type=1800 audit(1580300010.083:189): pid=10378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16946 res=0 [ 418.089096][ T27] audit: type=1800 audit(1580300010.213:190): pid=10378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16946 res=0 12:13:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 12:13:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x600c2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 12:13:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="1bdae52f8f810256f335529510e98b46411650fa37d285e1e486352b98f40fdddf9820252e8e8e5057b41fe97a234dd5ceca7b8f7d6bdb37f303", 0x3a}], 0x1}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r2, 0x0, &(0x7f00000002c0)="6fd30f39ce") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000280)={0x0}) 12:13:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 418.152982][ T27] audit: type=1800 audit(1580300010.243:191): pid=10378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16946 res=0 12:13:30 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0xd6, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) 12:13:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 12:13:30 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x600c2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0, 0x1ff}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 12:13:30 executing program 3: setrlimit(0x2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000040)) 12:13:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 418.935918][ T27] audit: type=1800 audit(1580300011.063:192): pid=10414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16902 res=0 12:13:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_RMID(0x0, 0x0) 12:13:31 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./bus\x00', 0x0, 0x49000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 12:13:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 12:13:31 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) fcntl$setpipe(r0, 0x407, 0x0) 12:13:31 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./bus\x00', 0x0, 0x49000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 12:13:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 12:13:31 executing program 3: setrlimit(0x2, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) clone(0x20986100, 0x0, 0x0, 0x0, &(0x7f0000000040)) 12:13:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x422000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) symlinkat(0x0, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bond\x00', 0x10) sendmmsg(r1, &(0x7f0000006d00), 0x1eb, 0x24000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:13:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x422000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) symlinkat(0x0, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bond\x00', 0x10) sendmmsg(r1, &(0x7f0000006d00), 0x1eb, 0x24000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 420.581366][ T9359] tipc: TX() has been purged, node left! 12:13:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 12:13:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x3a, 0x1, 0x0, 0x0) 12:13:32 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00bf00020003"], 0x6) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x308) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) 12:13:33 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x2, 0x0) write$P9_RLOCK(r1, 0x0, 0xfdf3) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) clone3(&(0x7f0000000380)={0x200, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0), {}, &(0x7f0000000100)=""/61, 0x3d, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x8044610a, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) [ 420.956313][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 420.956335][ T27] audit: type=1800 audit(1580300013.083:198): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16950 res=0 12:13:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229) [ 421.111444][ T27] audit: type=1800 audit(1580300013.193:199): pid=10492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16950 res=0 [ 421.180751][ T27] audit: type=1800 audit(1580300013.203:200): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16950 res=0 12:13:33 executing program 1: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x0, 0x0, 0xffffffffffffff49) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:13:33 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) 12:13:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 12:13:33 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) fcntl$getflags(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) clock_gettime(0x0, 0x0) getpgrp(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 12:13:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:33 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x2, 0x0) write$P9_RLOCK(r1, 0x0, 0xfdf3) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) clone3(&(0x7f0000000380)={0x200, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0), {}, &(0x7f0000000100)=""/61, 0x3d, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x8044610a, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) [ 422.026566][ T27] audit: type=1800 audit(1580300014.153:201): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16976 res=0 [ 422.137888][ T27] audit: type=1800 audit(1580300014.263:202): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16976 res=0 12:13:34 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) 12:13:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast1, 0x15}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xffffffffffffffd3}, {0x0}, {&(0x7f0000000140)=""/73, 0xffffffffffffff15}], 0x0, 0x0, 0x15d, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:13:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x3fffffffffffdeb, 0x0) 12:13:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:35 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="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", 0x534, 0xc001, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca1babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a7453575b33cdd7300a74dd585eab465795dccddd26", 0x79, 0x400c000, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 423.025862][ T27] audit: type=1800 audit(1580300015.153:203): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16973 res=0 [ 423.136660][ T27] audit: type=1800 audit(1580300015.263:204): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16973 res=0 12:13:35 executing program 3: socket$inet6(0xa, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xbff, &(0x7f0000000400)="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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 12:13:35 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x29, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 12:13:36 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0}}], 0x2, 0x0) 12:13:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x3fffffffffffdeb, 0x0) 12:13:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) [ 423.361421][T10574] ptrace attach of "/root/syz-executor.3"[8059] was attempted by " 0 p   \x0b  @ = [ 425.061254][ T27] audit: type=1800 audit(1580300017.183:205): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16991 res=0 [ 425.359287][ T27] audit: type=1800 audit(1580300017.353:206): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16991 res=0 12:13:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[]}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080), 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000340)=0x3f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:37 executing program 4: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) 12:13:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast1, 0x15}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xffffffffffffffd3}, {0x0}, {&(0x7f0000000140)=""/73, 0xffffffffffffff15}], 0x0, 0x0, 0x15d, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:13:37 executing program 1: wait4(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000001540)='}\xbf*x\x89-vO\xd3JUk\x88O\xc4N\xa2\rqI\r\xb3\xd9Q(\n\x1a\x9f/X\x1d9\x03\xc2\x16\xaf\x9d\xffl\xdcC\xeb\xa6\x96\x12$\xd15[z\x85\xf4\x1e\xcc\xfc\xf64\x00\x00\x00\x00\x00\x00\x00Pw\x1bN[\x81\x92\x15P\xc5\x0e\x06\x17\b\xaf\nu\xd8D9z\x9eR\bjh\xce\xa9j\xda\xf8B\x84\x8d\x12.\xeb\x95\x9a\n\xb2M\xc7\xd1\x87N\xc5Os?T\"\xfc\fc\x92\xbb>\xa3l\x9a\xc9\'\x14\xd5+\xb1\xa6\xf5\x9e\xd1\xea%\xd8l\xae\xd6\\dZ\x17/\xe7$(\x8ax\xdc\xc4\xb7\xa4\x9b\x92\xd8\x16Lz\x9e\xfc\xf8\xf1\xdc\xb9+F~%\x16e\x81\x1b\x11vw1:\xdd]\xb9\xe8\x99\xea\xd1O\x83\xf3WA\xad\xaa\xdc\r~[I\x9f\xac\x03\xf9\xe2\x12Je\xe9$\xd2\x00\xef\r\x9dQ2\xa1T4\xb4\x116RO+\x0e\x98\x8b\x1b\xc1\x81\xf0U\x93\xd1\xf7\xbb}N\'\xea\x8f\xbbdd\xda\xb5\x7f\xff\xef\xfd\xd5\x9b\x01?\xad \xa8\xe3l\x86\"\x94M\xd5\xfa]\x9f\x1d\xad\xf9y\xfc\x03=$Z\x00Oa#`qHd\xcc\x8f\x80\xa1\xed\x81 \x85\xe7\x1f\x99\xbe\xe8\xe5\xcey\n\xab\x8b\xa0yM\xba\xcf7}\x8eVQ\xe6d.S\x9e\xb1\x98\xd9\xc8;\xcc\xd5\xf2)\xf7Zh)\xffF\xb8\xc7\xd2%\xe9\xc7\x05\xefq\\\x97]\xd7\x1b\xdf\"o\xca\xd4\xe0\xd5\x125\xefz1\xcc\xe1nZ\xbe\x16\xa1\x8f\xc8)9\xb8\xc6\xc2\xdd8.*U\xe0\xc5\x04\x00\xd9\xfd{ZT\xf2\xe4\xb9\x95x\xa5\xbd\x04\x0f\x8eky\xd8\x8e\xd77\xd7\x0fp\n\x11\x13)\x9b\xf3D\xb2\x88*(\x02{\xb2`:\x01\x00\x00\x00\x00\x00\x00\xee\xff\xff\xffV2\xaa\x82', 0x0) r1 = memfd_create(&(0x7f0000001540)='}\xbf*x\x89-vO\xd3JUk\x88O\xc4N\xa2\rqI\r\xb3\xd9Q(\n\x1a\x9f/X\x1d9\x03\xc2\x16\xaf\x9d\xffl\xdcC\xeb\xa6\x96\x12$\xd15[z\x85\xf4\x1e\xcc\xfc\xf64\x00\x00\x00\x00\x00\x00\x00Pw\x1bN[\x81\x92\x15P\xc5\x0e\x06\x17\b\xaf\nu\xd8D9z\x9eR\bjh\xce\xa9j\xda\xf8B\x84\x8d\x12.\xeb\x95\x9a\n\xb2M\xc7\xd1\x87N\xc5Os?T\"\xfc\fc\x92\xbb>\xa3l\x9a\xc9\'\x14\xd5+\xb1\xa6\xf5\x9e\xd1\xea%\xd8l\xae\xd6\\dZ\x17/\xe7$(\x8ax\xdc\xc4\xb7\xa4\x9b\x92\xd8\x16Lz\x9e\xfc\xf8\xf1\xdc\xb9+F~%\x16e\x81\x1b\x11vw1:\xdd]\xb9\xe8\x99\xea\xd1O\x83\xf3WA\xad\xaa\xdc\r~[I\x9f\xac\x03\xf9\xe2\x12Je\xe9$\xd2\x00\xef\r\x9dQ2\xa1T4\xb4\x116RO+\x0e\x98\x8b\x1b\xc1\x81\xf0U\x93\xd1\xf7\xbb}N\'\xea\x8f\xbbdd\xda\xb5\x7f\xff\xef\xfd\xd5\x9b\x01?\xad \xa8\xe3l\x86\"\x94M\xd5\xfa]\x9f\x1d\xad\xf9y\xfc\x03=$Z\x00Oa#`qHd\xcc\x8f\x80\xa1\xed\x81 \x85\xe7\x1f\x99\xbe\xe8\xe5\xcey\n\xab\x8b\xa0yM\xba\xcf7}\x8eVQ\xe6d.S\x9e\xb1\x98\xd9\xc8;\xcc\xd5\xf2)\xf7Zh)\xffF\xb8\xc7\xd2%\xe9\xc7\x05\xefq\\\x97]\xd7\x1b\xdf\"o\xca\xd4\xe0\xd5\x125\xefz1\xcc\xe1nZ\xbe\x16\xa1\x8f\xc8)9\xb8\xc6\xc2\xdd8.*U\xe0\xc5\x04\x00\xd9\xfd{ZT\xf2\xe4\xb9\x95x\xa5\xbd\x04\x0f\x8eky\xd8\x8e\xd77\xd7\x0fp\n\x11\x13)\x9b\xf3D\xb2\x88*(\x02{\xb2`:\x01\x00\x00\x00\x00\x00\x00\xee\xff\xff\xffV2\xaa\x82', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendfile(r1, r2, 0x0, 0x40d5) sendfile(r0, r2, 0x0, 0x40d7) 12:13:37 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0x0, 0x120, 0x120, 0x0, 0x0, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@set4={{0x50, 'set\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 12:13:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:13:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r9, 0x800) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast1, 0x15}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xffffffffffffffd3}, {0x0}, {&(0x7f0000000140)=""/73, 0xffffffffffffff15}], 0x0, 0x0, 0x15d, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:13:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={0x0, @vsock={0x28, 0x0, 0x0, @hyper}, @xdp, @isdn, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='syzkaller0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12:13:38 executing program 1: wait4(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000001540)='}\xbf*x\x89-vO\xd3JUk\x88O\xc4N\xa2\rqI\r\xb3\xd9Q(\n\x1a\x9f/X\x1d9\x03\xc2\x16\xaf\x9d\xffl\xdcC\xeb\xa6\x96\x12$\xd15[z\x85\xf4\x1e\xcc\xfc\xf64\x00\x00\x00\x00\x00\x00\x00Pw\x1bN[\x81\x92\x15P\xc5\x0e\x06\x17\b\xaf\nu\xd8D9z\x9eR\bjh\xce\xa9j\xda\xf8B\x84\x8d\x12.\xeb\x95\x9a\n\xb2M\xc7\xd1\x87N\xc5Os?T\"\xfc\fc\x92\xbb>\xa3l\x9a\xc9\'\x14\xd5+\xb1\xa6\xf5\x9e\xd1\xea%\xd8l\xae\xd6\\dZ\x17/\xe7$(\x8ax\xdc\xc4\xb7\xa4\x9b\x92\xd8\x16Lz\x9e\xfc\xf8\xf1\xdc\xb9+F~%\x16e\x81\x1b\x11vw1:\xdd]\xb9\xe8\x99\xea\xd1O\x83\xf3WA\xad\xaa\xdc\r~[I\x9f\xac\x03\xf9\xe2\x12Je\xe9$\xd2\x00\xef\r\x9dQ2\xa1T4\xb4\x116RO+\x0e\x98\x8b\x1b\xc1\x81\xf0U\x93\xd1\xf7\xbb}N\'\xea\x8f\xbbdd\xda\xb5\x7f\xff\xef\xfd\xd5\x9b\x01?\xad \xa8\xe3l\x86\"\x94M\xd5\xfa]\x9f\x1d\xad\xf9y\xfc\x03=$Z\x00Oa#`qHd\xcc\x8f\x80\xa1\xed\x81 \x85\xe7\x1f\x99\xbe\xe8\xe5\xcey\n\xab\x8b\xa0yM\xba\xcf7}\x8eVQ\xe6d.S\x9e\xb1\x98\xd9\xc8;\xcc\xd5\xf2)\xf7Zh)\xffF\xb8\xc7\xd2%\xe9\xc7\x05\xefq\\\x97]\xd7\x1b\xdf\"o\xca\xd4\xe0\xd5\x125\xefz1\xcc\xe1nZ\xbe\x16\xa1\x8f\xc8)9\xb8\xc6\xc2\xdd8.*U\xe0\xc5\x04\x00\xd9\xfd{ZT\xf2\xe4\xb9\x95x\xa5\xbd\x04\x0f\x8eky\xd8\x8e\xd77\xd7\x0fp\n\x11\x13)\x9b\xf3D\xb2\x88*(\x02{\xb2`:\x01\x00\x00\x00\x00\x00\x00\xee\xff\xff\xffV2\xaa\x82', 0x0) r1 = memfd_create(&(0x7f0000001540)='}\xbf*x\x89-vO\xd3JUk\x88O\xc4N\xa2\rqI\r\xb3\xd9Q(\n\x1a\x9f/X\x1d9\x03\xc2\x16\xaf\x9d\xffl\xdcC\xeb\xa6\x96\x12$\xd15[z\x85\xf4\x1e\xcc\xfc\xf64\x00\x00\x00\x00\x00\x00\x00Pw\x1bN[\x81\x92\x15P\xc5\x0e\x06\x17\b\xaf\nu\xd8D9z\x9eR\bjh\xce\xa9j\xda\xf8B\x84\x8d\x12.\xeb\x95\x9a\n\xb2M\xc7\xd1\x87N\xc5Os?T\"\xfc\fc\x92\xbb>\xa3l\x9a\xc9\'\x14\xd5+\xb1\xa6\xf5\x9e\xd1\xea%\xd8l\xae\xd6\\dZ\x17/\xe7$(\x8ax\xdc\xc4\xb7\xa4\x9b\x92\xd8\x16Lz\x9e\xfc\xf8\xf1\xdc\xb9+F~%\x16e\x81\x1b\x11vw1:\xdd]\xb9\xe8\x99\xea\xd1O\x83\xf3WA\xad\xaa\xdc\r~[I\x9f\xac\x03\xf9\xe2\x12Je\xe9$\xd2\x00\xef\r\x9dQ2\xa1T4\xb4\x116RO+\x0e\x98\x8b\x1b\xc1\x81\xf0U\x93\xd1\xf7\xbb}N\'\xea\x8f\xbbdd\xda\xb5\x7f\xff\xef\xfd\xd5\x9b\x01?\xad \xa8\xe3l\x86\"\x94M\xd5\xfa]\x9f\x1d\xad\xf9y\xfc\x03=$Z\x00Oa#`qHd\xcc\x8f\x80\xa1\xed\x81 \x85\xe7\x1f\x99\xbe\xe8\xe5\xcey\n\xab\x8b\xa0yM\xba\xcf7}\x8eVQ\xe6d.S\x9e\xb1\x98\xd9\xc8;\xcc\xd5\xf2)\xf7Zh)\xffF\xb8\xc7\xd2%\xe9\xc7\x05\xefq\\\x97]\xd7\x1b\xdf\"o\xca\xd4\xe0\xd5\x125\xefz1\xcc\xe1nZ\xbe\x16\xa1\x8f\xc8)9\xb8\xc6\xc2\xdd8.*U\xe0\xc5\x04\x00\xd9\xfd{ZT\xf2\xe4\xb9\x95x\xa5\xbd\x04\x0f\x8eky\xd8\x8e\xd77\xd7\x0fp\n\x11\x13)\x9b\xf3D\xb2\x88*(\x02{\xb2`:\x01\x00\x00\x00\x00\x00\x00\xee\xff\xff\xffV2\xaa\x82', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendfile(r1, r2, 0x0, 0x40d5) sendfile(r0, r2, 0x0, 0x40d7) 12:13:38 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x900000000000000) [ 426.144959][T10652] Cannot find set identified by id 0 to match [ 426.210289][ T27] audit: type=1800 audit(1580300018.333:207): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16989 res=0 [ 426.313381][ T27] audit: type=1800 audit(1580300018.443:208): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16989 res=0 12:13:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000003640)='IPVS\x00') tkill(r1, 0x1f) wait4(0x0, 0x0, 0x0, 0x0) 12:13:38 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) 12:13:38 executing program 3: tkill(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x80605414, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 12:13:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x2, 0x3, 0x32c, 0x0, 0x1e8, 0x0, 0x0, 0x0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'ip6tnl0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x388) 12:13:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/185, 0xb9}], 0x1) dup2(r3, r0) tkill(r1, 0x1000000000016) 12:13:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:13:39 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) [ 427.125992][ T27] audit: type=1800 audit(1580300019.253:209): pid=10700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17001 res=0 [ 427.228451][ T27] audit: type=1800 audit(1580300019.353:210): pid=10707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17001 res=0 12:13:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast1, 0x15}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xffffffffffffffd3}, {0x0}, {&(0x7f0000000140)=""/73, 0xffffffffffffff15}], 0x0, 0x0, 0x15d, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:13:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x201) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 12:13:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/185, 0xb9}], 0x1) dup2(r3, r0) tkill(r1, 0x1000000000016) 12:13:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) 12:13:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 429.217090][ T27] audit: type=1800 audit(1580300021.343:211): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17021 res=0 12:13:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/185, 0xb9}], 0x1) dup2(r3, r0) tkill(r1, 0x1000000000016) [ 429.350336][ T27] audit: type=1800 audit(1580300021.473:212): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17021 res=0 12:13:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/185, 0xb9}], 0x1) dup2(r3, r0) tkill(r1, 0x1000000000016) 12:13:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = memfd_create(&(0x7f0000000140)='\x002f\x8b\xa2h\xf1D\x1b\xee\x1e\x8c\xb8\x8ax\x95\xf2\xdf\x11o\xb6\x8d\xcb\x01+\xe0\xeb\x9f\xf61\xceH0\x9c\xc1\x948kJ\xe4\xb3D\xf3\xb2\xbf\x9dZS\xa8\xc4\xb9/\xa6\xd3\xc2\f\x16', 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000005c0)=ANY=[@ANYRES64], 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000000)) [ 429.831358][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 429.837215][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:13:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:13:42 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x8, 0x0, 0x1001}}, 0x50) [ 430.247171][ T27] audit: type=1800 audit(1580300022.373:213): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17008 res=0 [ 430.369246][ T27] audit: type=1800 audit(1580300022.493:214): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17008 res=0 12:13:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast1, 0x15}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xffffffffffffffd3}, {0x0}, {&(0x7f0000000140)=""/73, 0xffffffffffffff15}], 0x0, 0x0, 0x15d, 0x0) tkill(r0, 0x3c) ptrace$cont(0x7, r0, 0x0, 0x0) 12:13:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) pipe(0x0) wait4(0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4}}, {{@in6=@rand_addr="000000000000b800", 0x0, 0x32}, 0x0, @in=@local}}, 0xe4) pipe(0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc93, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:45 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f3) ftruncate(r0, 0x8200) 12:13:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:45 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) 12:13:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:13:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_create(0x9, 0x0) 12:13:45 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x4785, 0x0, 0x1798}) r0 = memfd_create(&(0x7f0000000340)='q\x05\x00\x00\x00\xdd\x035I\xa6\xc0\x10$\xabb\x00\x00\x00\x00\x00\x00\x01\xcb/S\xdc\xdd\x0e\a\x00\x005+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x8aC\x96\x8c\xd0\xe6\x83\xaaw\xaa\x93\xea\xa6\xcf \x8e\xa3]\xfe\x91u\x1d\x90\xa0Z\\Y\xc4dl\xfd|o\xde\x9e\xa5\x93h\x84\x8a\xd0\xce\xff\x80\xf3/\x16u\x15\x03\xfb\xc1$\x0f\xa6[d\xd9EC\xd6~-\xcd\tey\xa0\xa8\xd7\x88\xd2{vf5\xeaX\r\xea\xb1\x1d(xb\xe80\xa5\x8e\x97Mc\x17\xb4f\xb2\xeej)\xb4\xb5\xa8\x05\\f9v\x9e\xd8\x9fT\xf4\xafD\xbb\x96\xfe\xd2\f\xb1\x12\xe6\xa5n\x1e\x90r1G\x110\x99\x18\xee@\xb1F', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) [ 433.365224][ T27] audit: type=1800 audit(1580300025.493:215): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17036 res=0 12:13:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@rand_addr="000000000000b800"}, 0x0, @in=@local}}, 0xe4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 433.469875][ T27] audit: type=1800 audit(1580300025.593:216): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17036 res=0 12:13:45 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001e0009"], 0x1}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffde, 0x0) 12:13:46 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x4785, 0x0, 0x1798}) r0 = memfd_create(&(0x7f0000000340)='q\x05\x00\x00\x00\xdd\x035I\xa6\xc0\x10$\xabb\x00\x00\x00\x00\x00\x00\x01\xcb/S\xdc\xdd\x0e\a\x00\x005+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x8aC\x96\x8c\xd0\xe6\x83\xaaw\xaa\x93\xea\xa6\xcf \x8e\xa3]\xfe\x91u\x1d\x90\xa0Z\\Y\xc4dl\xfd|o\xde\x9e\xa5\x93h\x84\x8a\xd0\xce\xff\x80\xf3/\x16u\x15\x03\xfb\xc1$\x0f\xa6[d\xd9EC\xd6~-\xcd\tey\xa0\xa8\xd7\x88\xd2{vf5\xeaX\r\xea\xb1\x1d(xb\xe80\xa5\x8e\x97Mc\x17\xb4f\xb2\xeej)\xb4\xb5\xa8\x05\\f9v\x9e\xd8\x9fT\xf4\xafD\xbb\x96\xfe\xd2\f\xb1\x12\xe6\xa5n\x1e\x90r1G\x110\x99\x18\xee@\xb1F', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 12:13:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 434.246823][ T27] audit: type=1800 audit(1580300026.373:217): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17036 res=0 [ 434.374471][ T27] audit: type=1800 audit(1580300026.503:218): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17036 res=0 12:13:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast1, 0x15}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xffffffffffffffd3}, {0x0}, {&(0x7f0000000140)=""/73, 0xffffffffffffff15}], 0x0, 0x0, 0x15d, 0x0) tkill(r0, 0x3c) ptrace$cont(0x7, r0, 0x0, 0x0) 12:13:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:13:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12}, 0x3c) 12:13:47 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc", 0xa4}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:13:47 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "831846", 0x8, 0x11, 0x0, @local, @ipv4={[], [], @dev}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 12:13:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 12:13:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@rand_addr="000000000000b800"}, 0x0, @in=@local}}, 0xe4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xfffffffffffffeb4}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:13:47 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "831846", 0x8, 0x11, 0x0, @local, @ipv4={[], [], @dev}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) [ 435.513672][ T27] audit: type=1800 audit(1580300027.643:219): pid=10848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17035 res=0 [ 435.605433][T10853] ================================================================== [ 435.614290][T10853] BUG: KCSAN: data-race in wbc_detach_inode / wbc_detach_inode [ 435.622191][T10853] [ 435.625002][T10853] read to 0xffff888127c642ac of 2 bytes by task 10848 on cpu 1: [ 435.633532][T10853] wbc_detach_inode+0x95/0x520 [ 435.638549][T10853] __filemap_fdatawrite_range+0x1d4/0x230 [ 435.644697][T10853] filemap_write_and_wait_range+0xb1/0x150 [ 435.650890][T10853] iomap_dio_rw+0x3a2/0x9a0 [ 435.655828][T10853] ext4_file_read_iter+0x2e4/0x380 [ 435.661835][T10853] generic_file_splice_read+0x35c/0x500 [ 435.667500][T10853] do_splice_to+0xf2/0x130 [ 435.672072][T10853] splice_direct_to_actor+0x1b6/0x540 [ 435.677547][T10853] do_splice_direct+0x161/0x1e0 [ 435.682468][T10853] do_sendfile+0x384/0x7f0 [ 435.687257][T10853] __x64_sys_sendfile64+0x12a/0x140 [ 435.692775][T10853] do_syscall_64+0xcc/0x3a0 [ 435.697307][T10853] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 435.703427][T10853] [ 435.705777][T10853] write to 0xffff888127c642ac of 2 bytes by task 10853 on cpu 0: [ 435.714110][T10853] wbc_detach_inode+0x260/0x520 [ 435.719424][T10853] __filemap_fdatawrite_range+0x1d4/0x230 [ 435.725564][T10853] filemap_write_and_wait_range+0xb1/0x150 [ 435.731711][T10853] iomap_dio_rw+0x3a2/0x9a0 [ 435.736541][T10853] ext4_file_read_iter+0x2e4/0x380 [ 435.742331][T10853] generic_file_splice_read+0x35c/0x500 [ 435.748546][T10853] do_splice_to+0xf2/0x130 [ 435.752990][T10853] splice_direct_to_actor+0x1b6/0x540 [ 435.758736][T10853] do_splice_direct+0x161/0x1e0 [ 435.763729][T10853] do_sendfile+0x384/0x7f0 [ 435.768467][T10853] __x64_sys_sendfile64+0x12a/0x140 [ 435.773912][T10853] do_syscall_64+0xcc/0x3a0 [ 435.778757][T10853] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 435.784785][T10853] [ 435.787219][T10853] Reported by Kernel Concurrency Sanitizer on: [ 435.793954][T10853] CPU: 0 PID: 10853 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 435.803247][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.814127][T10853] ================================================================== [ 435.823259][T10853] Kernel panic - not syncing: panic_on_warn set ... [ 435.830452][T10853] CPU: 0 PID: 10853 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 435.839961][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.850994][T10853] Call Trace: [ 435.855165][T10853] dump_stack+0x11d/0x181 [ 435.860486][T10853] panic+0x210/0x640 [ 435.865246][T10853] ? vprintk_func+0x8d/0x140 [ 435.871150][T10853] kcsan_report.cold+0xc/0xd [ 435.877038][T10853] kcsan_setup_watchpoint+0x3fe/0x460 [ 435.882870][T10853] __tsan_unaligned_write2+0xc7/0x110 [ 435.888267][T10853] wbc_detach_inode+0x260/0x520 [ 435.893231][T10853] __filemap_fdatawrite_range+0x1d4/0x230 [ 435.899416][T10853] filemap_write_and_wait_range+0xb1/0x150 [ 435.905528][T10853] iomap_dio_rw+0x3a2/0x9a0 [ 435.911963][T10853] ? constant_test_bit+0x12/0x30 [ 435.918571][T10853] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 435.926247][T10853] ext4_file_read_iter+0x2e4/0x380 [ 435.931925][T10853] ? ext4_file_read_iter+0x2e4/0x380 [ 435.937886][T10853] generic_file_splice_read+0x35c/0x500 [ 435.945285][T10853] do_splice_to+0xf2/0x130 [ 435.950705][T10853] ? add_to_pipe+0x1c0/0x1c0 [ 435.956147][T10853] ? add_to_pipe+0x1c0/0x1c0 [ 435.961308][T10853] splice_direct_to_actor+0x1b6/0x540 [ 435.967049][T10853] ? generic_pipe_buf_nosteal+0x20/0x20 [ 435.974313][T10853] do_splice_direct+0x161/0x1e0 [ 435.980731][T10853] do_sendfile+0x384/0x7f0 [ 435.987921][T10853] __x64_sys_sendfile64+0x12a/0x140 [ 435.995371][T10853] do_syscall_64+0xcc/0x3a0 [ 436.000781][T10853] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 436.007034][T10853] RIP: 0033:0x45b349 [ 436.011683][T10853] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.033296][T10853] RSP: 002b:00007f621b4a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 436.042704][T10853] RAX: ffffffffffffffda RBX: 00007f621b4a46d4 RCX: 000000000045b349 [ 436.051229][T10853] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 436.059737][T10853] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 436.068366][T10853] R10: 0000000000280900 R11: 0000000000000246 R12: 00000000ffffffff [ 436.076571][T10853] R13: 00000000000008c9 R14: 00000000004ca1ed R15: 000000000075c124 [ 436.087232][T10853] Kernel Offset: disabled [ 436.091839][T10853] Rebooting in 86400 seconds..