[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.469535] audit: type=1800 audit(1538857551.357:25): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 36.489126] audit: type=1800 audit(1538857551.357:26): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 36.520496] audit: type=1800 audit(1538857551.357:27): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.68' (ECDSA) to the list of known hosts. 2018/10/06 20:26:08 fuzzer started 2018/10/06 20:26:10 dialing manager at 10.128.0.26:39193 2018/10/06 20:26:10 syscalls: 1 2018/10/06 20:26:10 code coverage: enabled 2018/10/06 20:26:10 comparison tracing: enabled 2018/10/06 20:26:10 setuid sandbox: enabled 2018/10/06 20:26:10 namespace sandbox: enabled 2018/10/06 20:26:10 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/06 20:26:10 fault injection: enabled 2018/10/06 20:26:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/06 20:26:10 net packed injection: enabled 2018/10/06 20:26:10 net device setup: enabled 20:29:06 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000080)="88f376b5adfbcab7196cc55ffe76f7a147e56af11483051ca8809d19a0266e3ce350f1437e029914a79588bb894aae48866461e6e65eeb9c0a6236a70035526fa01ad2cabc6881c77e8de11b7f9f0864d3a74423ffebe88f20aa5576cb2255e28578eb7071905c0ed420406fc3b2532fc20bcb50d17b4375a4938c38df9551fe7b1a8311a00096388309895fa06cc770bc529763fa9b2f4336a0d0333f4bf697dd942eb8eef6475abc446939ccc3bc120007fc", 0xb3, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x5980, @dev={0xfe, 0x80, [], 0x1f}, 0x3ff}, 0x1c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, @aes128, 0x1, "3966999ca586928c"}) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x400000) restart_syscall() r2 = open(&(0x7f0000000200)='./file0\x00', 0x400000, 0xe9) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={r3, 0x80000, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r5, 0x7, 0x5, [0xfffffffffffffffe, 0x6, 0x9, 0x7, 0x100000000]}, &(0x7f0000000380)=0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f00000003c0)={0x4, 0x5, 0x1ff, 0x9}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000440)={0xe, 0x7f, {0x57, 0x1, 0x10001, {0x7fffffff, 0x9}, {0x3f7, 0x7}, @period={0x5c, 0x4, 0x4, 0x100, 0x1ff, {0x7, 0x7bd8, 0x5696cae, 0x6}, 0x4, &(0x7f0000000400)=[0x711ec263, 0x101, 0xac7e, 0x3ff]}}, {0x57, 0x9, 0x7, {0x8, 0x4}, {0x3, 0x25}, @cond=[{0x7, 0x1, 0x0, 0x7, 0xffffffff, 0x6}, {0x2, 0x7fff, 0x1e, 0x1, 0x2}]}}) fcntl$addseals(r1, 0x409, 0x7) socketpair(0x3, 0xb, 0x3, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000500)=0xd45, 0x4) syz_open_pts(r1, 0x531c02) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) bind$inet6(r7, &(0x7f0000000580)={0xa, 0x4e20, 0xfffffffff826c925, @loopback, 0x6}, 0x1c) perf_event_open$cgroup(&(0x7f0000000600)={0x4, 0x70, 0x7, 0x5, 0x1, 0xfd, 0x0, 0xdc, 0x80000, 0x6, 0x14000, 0x8, 0x40b6, 0x3f, 0x3ff, 0x3, 0x0, 0x20, 0x3, 0xeac, 0x7fff, 0x6, 0x7ff, 0x80000000, 0x200, 0x9, 0x0, 0x100, 0xca34, 0x2, 0xa8, 0x9, 0xa3b, 0x4, 0x2, 0x7, 0x10001, 0x3, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f00000005c0), 0x9}, 0x4, 0xa0b, 0x7, 0x7, 0x6, 0xffffffff, 0x1}, r1, 0xd, r2, 0x8) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000680)=0x9) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000006c0)=0x1000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000700)={r5, @in={{0x2, 0x4e22, @broadcast}}, [0x9, 0x2, 0x3, 0x2, 0x7, 0x3, 0x1, 0xfff, 0x3, 0x8, 0xd0ce, 0xfd4d, 0x3, 0x7, 0xac]}, &(0x7f0000000800)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000840)={r8, 0x1}, &(0x7f0000000880)=0x8) write$binfmt_aout(r4, &(0x7f00000008c0)={{0x10b, 0x2, 0x3, 0x2d0, 0xc7, 0x1ff, 0x5b}, "5d238906f14fb0276e721270591bea0b55d3f13e07e03087c4d6dd0d6bc5cad754bef043d41181a9d2dd6b04498078f5d4cc68008a9ed3ea0bb7d1eed072971d488363997619389980dccf635c1134deb8072990afdf3a38e20792d83e04c72078e3afbaffec84db307abd6a8bff9fef75b43d2d28ecbaeb729b7da2d76b439712f9a9c7a3d7199c614df73d395c54f290ee6823d02ba0a946d9428031d25e4ad6dc5838a577210763eb4f9f07337793b0365c61106cc37d621a073c42fa0fe72ae4a993e1e55742700b7a3fcd0c42f85cc6082f603b1d598620b4fee33efb", [[], [], [], [], []]}, 0x5ff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r0, &(0x7f0000000ec0)="8415e597ac1bf8bd7dcb0096e596209e0c7a44eb5ab015ad12466058960a561eb6d6cd6bbaaa3fb8029b1c92ed65dbd497e7f85074", &(0x7f0000000f00)=""/10}, 0x18) ioctl$RNDADDTOENTCNT(r7, 0x40045201, &(0x7f0000000f80)=0x1) write$binfmt_aout(r0, &(0x7f0000000fc0)={{0x0, 0x6a9, 0x363d, 0x137, 0x2a6, 0x3, 0x1e4, 0x5}, "6d91473a8424734c3f4daab46d5177a3d9ee5d3833af9a5d2b"}, 0x39) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000001000)={{0x3b, @multicast1, 0x4e24, 0x0, 'dh\x00', 0x2b, 0x6, 0x5b}, {@multicast2, 0x4e22, 0x2007, 0x200, 0x1, 0x8}}, 0x44) ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f0000001080)) syzkaller login: [ 232.146234] IPVS: ftp: loaded support on port[0] = 21 20:29:07 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x6, 0x401, 0xffffffff, 0x4c, 0x657}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r1, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)=""/97, &(0x7f00000002c0)=0x61) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000300)='btrfs\x00', &(0x7f0000000340)='./file0\x00', 0xb56, 0x5, &(0x7f0000001640)=[{&(0x7f0000000380)="ee41772556d87436e10b0ff7943e6dfbebaa6ccaca723747593ff850107fb9abcb4b6d9eb917556bb44526aaafd1eaf1c93a279c08fc215b616f59c2ce78f1037a56199d68e06fa12aca1a3893caed7ce03b6a9f850f617f2f89a9afba45dc4122ea9bf65c5db9808e21a82dceed53517dcd4ad9d53aaf1110b540cec38f208eae5686523476bd687ad35a6f16b69b81e4915b0ac9bbaa09b221a685ef371e82e1b457543692a4e4dec793dc4897582a62c2540ade0ae703eb4eca", 0xbb}, {&(0x7f0000000440)="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", 0x1000, 0xfffffffffffffff9}, {&(0x7f0000001440)="1f49aa4a2c43b29a4a933915a4c7701874d1ed38f80d424c68901c9bdf6e09fae47bf6469af117fdc805eccaf29c1c396f21ee0181e09b4baa2969f1f33171b24a05cc4bb9a183e312", 0x49, 0x101}, {&(0x7f00000014c0)="eb689c7d4e36411601e2da7c1713b0eabacf1ce3b6ab9d9cd8fbb3419dce66d64cfc05efa8403ee484ef217154f24e8d7919927d9b6de1127e0112ddbbc201cd88ab5b6233387105ed39a017607eee2ea29af542c956cd05e7f9e47b3282058cb68af04411979255ea350397c4e142487b29b92903d1f1f5fa4336560e8fdecf773cfa454a78f2c505ff5a4d72dedb5a0466e863ed86aa302927", 0x9a, 0x2}, {&(0x7f0000001580)="522eba350f76904c000da48df21c8898999e575b02b74f147d4de7d30e8b5da82f135fa822169dccf48a64fa91227e947566bb47b53204010411cc9170fb5c3c185e8ba73898c5d842440bfbc5a393a81207f5e44937dc364142b32c8cbb513304f133df12451cfe52bd54d5d944562a12351be4558eaa29563061e819df4bba1cdd8430b6250dfc1f7692437a56c042e5f3cc1b023dc211f42a09e54af8c056727956c0da8c", 0xa6, 0x4a9f}], 0x40000, &(0x7f0000001780)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x20}}, {@notreelog='notreelog'}, {@inode_cache='inode_cache'}, {@compress_force='compress-force'}, {@inode_cache='inode_cache'}, {@max_inline={'max_inline', 0x3d, [0x3d, 0x77, 0x6b, 0x0, 0x39]}}, {@nossd='nossd'}, {@acl='acl'}, {@noautodefrag='noautodefrag'}], [{@subj_role={'subj_role'}}, {@subj_type={'subj_type'}}, {@subj_type={'subj_type', 0x3d, "9b"}}, {@obj_role={'obj_role'}}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, 'bdevposix_acl_accesseth1:vboxnet1+/eth0ppp0[userppp0'}}, {@uid_gt={'uid>', r2}}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000018c0)={@empty, 0x2, 0xe54c7e814958fa86, 0x0, 0x4, 0x6, 0x1, 0x7f}, 0x20) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000001900)="d198fc4cd6659c6047a4cd2aa67e31a2192e6d4aaa318f232077674de5aa4509c5395ccc94d592550df481f8bb11d7efbc92ccb39b44c2c3c68e18c52ba7b404269bbb3050c50b1013fd39d3b59f9dccbc734749d80552adf555e6aae0feef5fd47b766f8fcf9f9d991664c1a36eb9812102b4b555c349df086d95b65571d54229e102343860de3e3bc41c8319dc9cc7dc05825be52403b3f5e9b73d44ac3179190e49d762547cb967d303e7774a3d92b216d0cfb9bbddabc14fe1bcb74eab1273696fdf5e781826a8e302e5e31850c9d1c27e439567689a07b0a31e69c4383b8090fb94d8b90a69bb") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)={0xf, 0xfffffffffffffffd, 0x5, 0x10000, 0x10, 0xffffffffffffff9c, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002a80)={r3, &(0x7f0000001a40)="14bf8fc83fa7", &(0x7f0000001a80)="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"}, 0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000002ac0)={r1, @in6={{0xa, 0x4e20, 0x2, @local, 0x4}}}, 0x84) times(&(0x7f0000002b80)) r4 = memfd_create(&(0x7f0000002bc0)='btrfs\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002c00)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000002c80)={0x14, 0x88, 0xfa00, {r5, 0x3c, 0x0, @in={0x2, 0x4e20, @rand_addr=0x1f}}}, 0x90) clock_gettime(0x0, &(0x7f0000002d80)={0x0, 0x0}) ppoll(&(0x7f0000002d40)=[{r3, 0x22}, {r3, 0x4000}, {r0, 0x2}, {r4, 0xc048}, {r0}], 0x5, &(0x7f0000002dc0)={r6, r7+30000000}, &(0x7f0000002e00)={0x9}, 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000002e40)={0x7, 0xfffffffffffffffb, 0x597}) ioprio_get$uid(0x3, r2) r8 = request_key(&(0x7f0000002e80)='.dead\x00', &(0x7f0000002ec0)={'syz', 0x1}, &(0x7f0000002f00)='*user\x00', 0xfffffffffffffff9) r9 = add_key$user(&(0x7f0000002f40)='user\x00', &(0x7f0000002f80)={'syz', 0x2}, &(0x7f0000002fc0)="e62c416c6e3f961c3522dba732e411ca3f8bad22440888be12262ff6f58cbf3f973cb77f0a87035910174440ac7893f9681986b4682797956415441b1f2e428f7ebb2246c523b23ddb9237416089b1359f2b851ef35e26e60fd5a8396594483ded21b5fe9fc9ffe92a50665130d6a847a88683cb2dc7df3a08b2e7eeb70fad95a740a1816babca0126a36671ddb32aca633e9447947d865783f58fe35bf61b35f680d53d9cfb924a06fb", 0xaa, 0xfffffffffffffffc) r10 = add_key$user(&(0x7f0000003080)='user\x00', &(0x7f00000030c0)={'syz', 0x1}, &(0x7f0000003100)="27c5f9e52ef4d76656ca24e8e6f7ec26fcfcd87bb1a1ae49a12d16a312c65f89556191555670b8210f8410fb01b894471b6d4f9cdb2a7fe0536c6a0d730ea7084920abbfe3eae9817139c94ff712180a2e72b6d29314ebf3363202d810a219dc521a3c58afa6f959ca964a183792f691b16dfcf59e18dde9ca944e89728e9f66be9b6de6c740f2cec1f8055afc659f4871", 0x91, 0x0) keyctl$dh_compute(0x17, &(0x7f00000031c0)={r8, r9, r10}, &(0x7f0000003200)=""/170, 0xaa, &(0x7f0000003380)={&(0x7f00000032c0)={'tgr192\x00'}, &(0x7f0000003300)="700bff7a7a6a6dace974a027603d8d6b6cfab2b9c382453673b327d1ed641b2d472f4925ec57bff2eeb29550952cd0ab2a722e934ab68e26b79b781fb8d47a8c0cd827e277934286b61b8d581449a724c3e63e8409e7c79c6b30323f53c5d4ef61cfd732208e025b21f21cbefda8453a7c64c0", 0x73}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000033c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000003400)={@mcast1, @dev={0xfe, 0x80, [], 0x2}, @mcast2, 0x0, 0xf6e, 0x5, 0x400, 0xf46, 0x4, r11}) accept4$unix(r0, &(0x7f0000003480)=@abs, &(0x7f0000003500)=0x6e, 0x80800) write$P9_RWRITE(r4, &(0x7f0000003540)={0xb, 0x77, 0x2, 0x3f}, 0xb) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000035c0)=&(0x7f0000003580)) openat$vcs(0xffffffffffffff9c, &(0x7f0000003600)='/dev/vcs\x00', 0x0, 0x0) pipe(&(0x7f0000003640)={0xffffffffffffffff}) ioctl$KDENABIO(r12, 0x4b36) [ 232.384031] IPVS: ftp: loaded support on port[0] = 21 20:29:07 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x600) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x8, 0x5, 0x4, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x2}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0)={0x4}, 0x4) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) connect$can_bcm(r0, &(0x7f0000000280)={0x1d, r2}, 0x10) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0)) getpeername$unix(r0, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000400)={'teql0\x00', {0x2, 0x4e21, @remote}}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000480)={0xb, &(0x7f0000000440)=""/11}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000004c0)) write$P9_RREADDIR(r0, &(0x7f0000000500)={0x2a, 0x29, 0x2, {0x2, [{{0x0, 0x0, 0x4}, 0x4, 0x3, 0x7, './file0'}]}}, 0x2a) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000540)={0x4}, 0x1) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000580)=""/173) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x81}, 0x1) sendto$inet(r0, &(0x7f0000000680)="c6ebcf2a2fc802797bc492ed87b14a4c1a91b30da45e453a1fd6d7c71715e10caa8bed02f21c94f46a7b9d0a98bfb6450b3410f78de7f0f0d6825e594a7387553d6f96287c7b8db71cbcb9aa5a2df8bc3669e6607a5db0880f60e9d58bc7025b50568c87f72c1a47ac7eb72a25fe68dc8d2ecbdeccc6aff2f7c387", 0x7b, 0x1, &(0x7f0000000700)={0x2, 0x4e23, @loopback}, 0x10) getsockname$netlink(r0, &(0x7f0000000740), &(0x7f0000000780)=0xc) recvmsg(r1, &(0x7f0000001a80)={&(0x7f00000007c0)=@in, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/107, 0x6b}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x4}, 0x40000023) unlink(&(0x7f0000001ac0)='./file0\x00') r3 = add_key$keyring(&(0x7f0000001b00)='keyring\x00', &(0x7f0000001b40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) getresuid(&(0x7f0000001b80)=0x0, &(0x7f0000001bc0), &(0x7f0000001c00)) lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, r4, r5) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000001d00)) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/dsp\x00', 0x22042, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000001d80)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000001dc0)={r7, 0x20}) setxattr$security_smack_transmute(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001e80)='TRUE', 0x4, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000001ec0)={0x0, @in6={{0xa, 0x4e23, 0x8, @local, 0x4}}}, &(0x7f0000001f80)=0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000001fc0)={r8, @in6={{0xa, 0x4e24, 0x7fffffff, @remote, 0x70}}}, 0x84) [ 232.630772] IPVS: ftp: loaded support on port[0] = 21 20:29:07 executing program 3: r0 = geteuid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getgroups(0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [{0x2, 0x1, r0}, {0x2, 0x1, r1}, {0x2, 0x4, r3}, {0x2, 0x5, r5}], {0x4, 0x1}, [{0x8, 0x1, r6}, {0x8, 0x2, r8}], {0x10, 0x2}, {0x20, 0x3}}, 0x54, 0x3) r9 = syz_open_dev$vcsa(&(0x7f0000004200)='/dev/vcsa#\x00', 0x7fff, 0x80) getsockname$unix(r9, &(0x7f0000004240)=@abs, &(0x7f00000042c0)=0x6e) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2286, &(0x7f0000004300)) connect$inet6(r9, &(0x7f0000004480)={0xa, 0x4e23, 0x8aab544, @loopback, 0x35}, 0x1c) setsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000044c0)={r4, r3, r7}, 0xc) ioctl$KDSKBMODE(r9, 0x4b45, &(0x7f0000004500)=0xfffffffffffffff9) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000004540)='trusted.overlay.upper\x00', &(0x7f0000004580)={0x0, 0xfb, 0xda, 0x2, 0x0, "d0e6be7271ebcd904c6cee4c2524b43f", "cbc9387af6e835d17311223d2d4d6c5aee5c6e45ddaccd677244d1fc7d4daa108d7f673ec33a341fd4f3fb6787377fd26a03e5e064e57fbc9530da1e83e6ce90fbf5d8dcc6d6698dd935b4bc40c49e61e8990330757746f8a0410029685465867e80ea25bdddea3628ccccc37a4ba15d23ec39a398335cb14e6668660318f2dd7765fd0b5e1153fc0c23ac932020919888cb2cec395312d6d062ffbc04efe5f8946fe8a518af21f5610980bf99cb5c6488397aa63375ce1fd65eaef0aa741228b1a7b5ac76"}, 0xda, 0x1) ioctl$VT_ACTIVATE(r9, 0x5606, 0xe053) ioctl$PIO_FONTX(r9, 0x4b6c, &(0x7f0000004680)="3e7b904247054c930f9b9d7cce903da3bfd0d13eb8b02b810958ba8702435f5dc632e814b8c5fe401b611174f30af22803c43700fd5cd72549602a7b339fb3b54a3e611672a43e4692da2fbdd145aca1c2c12ce58152729617b0e4d79d821ae63563ae16ea94eebcae6e158c40c4d260947f73f331be66aee612fc8c275517ceeb30906a2afb7cadddb7d18fafb8f5493edb113adf9d92dd188e53e084e56a5deb87ca13c73b9b95dafea6eca198930fbebf1b2af7be568ded925096") setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000004740)=0x4d8, 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r9, 0xc004aea7, &(0x7f0000004780)=0x2) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f00000047c0)={0x1, 0x6, 0x3, 0x5}) ioctl$TCSETS(r9, 0x5402, &(0x7f0000004800)={0x4, 0x84, 0x4, 0xfffffffffffffff7, 0x5, 0x8, 0xc09c, 0x70, 0x4, 0x40, 0x61b, 0x2}) mkdirat$cgroup(r9, &(0x7f0000004840)='syz1\x00', 0x1ff) r10 = syz_open_dev$usbmon(&(0x7f0000004880)='/dev/usbmon#\x00', 0x5, 0x4000) ioctl$EVIOCREVOKE(r10, 0x40044591, &(0x7f00000048c0)=0x1000) ioctl$VHOST_SET_VRING_BASE(r10, 0x4008af12, &(0x7f0000004900)={0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r9, 0xc05c5340, &(0x7f0000004940)={0xc927, 0x6, 0x6, {0x0, 0x989680}, 0x0, 0x42}) readlinkat(r10, &(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00)=""/4096, 0x1000) r11 = syz_open_dev$sndpcmp(&(0x7f0000005a00)='/dev/snd/pcmC#D#p\x00', 0x0, 0x20000) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000005a40)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in6, 0x4e23, 0x933, 0x4e23, 0x1, 0xa, 0x20, 0xa0, 0x2f, r2, r0}, {0xffffffffffff0000, 0x7ff, 0x1, 0x8, 0x6, 0x7, 0x8, 0x9}, {0x1000, 0x1, 0x2, 0x898}, 0x4, 0x6e6bb8, 0x2, 0x1, 0x3, 0x1}, {{@in=@rand_addr=0x6, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3504, 0x4, 0x2, 0x8, 0xfffffffffffffff7, 0x9, 0xfffffffffffffff8}}, 0xe8) ioctl$KVM_GET_XSAVE(r11, 0x9000aea4, &(0x7f0000005b40)) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000005f40)={@dev={0xfe, 0x80, [], 0x1e}, @empty, @local, 0x7d, 0x8001, 0x8, 0x400, 0x4, 0x40000162, r2}) [ 233.084036] IPVS: ftp: loaded support on port[0] = 21 [ 233.232721] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.239782] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.248177] device bridge_slave_0 entered promiscuous mode 20:29:08 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23}, @in6={0xa, 0x4e22, 0xff, @local, 0x7}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x1}, @in={0x2, 0x4e21, @loopback}], 0x58) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x2, 0x54, 0x490}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8) r3 = open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r2, 0x80000001, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000002c0)={0x4, [0x10000, 0x2, 0x8, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000340)=""/99, &(0x7f00000003c0)=0x63) r4 = accept4$alg(r3, 0x0, 0x0, 0x80800) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r2, 0x40, 0x96, "cdb19a657fcd5e781ecfb20e7a7e306765d021903e362321a7f10040eed922567d58d2a1677e331bd3cb11dad325c2cd161c0d4ff4bd6804dcad06250d33eba8fd0341632cd65ffb076352fd689311366661653894b259afce2b9f573e5a1fb45d79dc88f5f16412f7f609cf026f454b76af6a6cdbca57772a628ad6171fb81890ed672d5d498c53ef1c2f0d3a86f75bfd93bc9f5769"}, 0x9e) r5 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x8000) r6 = accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000580)={0x0, 0x3, {0xffffffffffffffff, 0x2, 0xfffffffffffeffff, 0x2}}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000600)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000640)={r2, 0x7}, 0x8) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000680)) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x8) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x188) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000740)) write$P9_RLCREATE(r3, &(0x7f0000000800)={0x18, 0xf, 0x1, {{0xba6a535356ea7288, 0x3, 0x8}, 0x9}}, 0x18) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x1c00000000) openat$cgroup_ro(r5, &(0x7f0000000840)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000880)=0xffffffffffffff00, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000940)={0x2, 0x1, 0x5, 0x6, r1}, &(0x7f0000000980)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) chown(&(0x7f00000009c0)='./file0\x00', r7, r8) openat$audio(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/audio\x00', 0x200000, 0x0) [ 233.358530] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.367653] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.387020] device bridge_slave_1 entered promiscuous mode [ 233.488136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.599733] IPVS: ftp: loaded support on port[0] = 21 [ 233.641408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 20:29:08 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x800, 0x8100) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000040)="185ce8247122f88375688fb84a54ad6d9197f0fde14bfa0b5e23b649b61298a2fe1aab05a1ee30ab16cde3df7d54919421c575668ed11410b5435930b701f3486d58f673f838b5ffc457ffafc0b8f46b706cb4f8ad1d01fb72352aafb7f4db9ac58c28219d2274435a76608f5145c37eb3ec32e073f755f599c12cfb084b938cd63b5f", 0x83) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000140)='/dev/dsp#\x00'], &(0x7f0000000200)=[0xfffffffffffffffd, &(0x7f00000001c0)='posix_acl_access$:em0/lovboxnet0\x00'], 0x800) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000240)={{0x62, @loopback, 0x4e24, 0x0, 'lblcr\x00', 0x18, 0x101, 0x50}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e20, 0x7, 0x1, 0xa8d, 0x81}}, 0x44) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000480)={@local, @loopback}, &(0x7f00000004c0)=0x8) getpeername(r0, &(0x7f0000000500)=@sco, &(0x7f0000000580)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000680)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000005c0), r1, 0x0, 0x2, 0x4}}, 0x20) syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000700), 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000740)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0x18) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f00000007c0)=0xced6, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x1, 0x4) connect$bt_sco(r0, &(0x7f0000000800)={0x1f, {0x4f, 0x0, 0x5, 0x9f, 0x400, 0xbf14}}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000840)={0x1b0, 0x1, 0x101, 0x8000, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000880)={r2, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000940)=0x84) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000980)={0xfa, 0xf406, 0x52d5, 0x7f, 0x9, 0xfffffffffffffffe, 0x7, 0xffffffffffffff80, 0x3, 0xbcb, 0x9, 0x6}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'vlan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000a00)={0x1d, r3}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000a40)={0x0, 'veth0_to_bond\x00'}, 0x18) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000a80)={0x401, {{0xa, 0x4e21, 0x101, @loopback, 0x5}}, {{0xa, 0x4, 0x5, @ipv4, 0x4d}}}, 0x108) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000bc0)={'nat\x00', 0x93, "12c8c1dd8dfe9b346e23d6eb391094864bf865e0c4093159c6b83ed79b1302531eff3faefdb93e45cd990e29835c735bb6fdff53dab39262cd3b46e3ef0a3e5dc1b13404b6e1a9a29ac72df3efd36aa2b2dd8aad3cc2bfc294e53cd94038b0e3ead65f69e5f69454b7da3126dee50cc11439a25dab7a75a26b604b52ec7b5ccfb48eaf022335d7e705b286b859757b6a09f6fd"}, &(0x7f0000000c80)=0xb7) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000cc0)={r0, r0}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d40)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000e40)=0x7, 0x4) open(&(0x7f0000000e80)='./file0\x00', 0x202, 0x100) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xffffffffffffff75) ioctl$VT_RELDISP(r0, 0x5605) [ 233.904610] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.912161] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.925966] device bridge_slave_0 entered promiscuous mode [ 233.937919] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.026655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.050614] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.074891] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.082366] device bridge_slave_1 entered promiscuous mode [ 234.140525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.150551] IPVS: ftp: loaded support on port[0] = 21 [ 234.159704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.190749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.213628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 234.236229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.253003] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.260034] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.272281] device bridge_slave_0 entered promiscuous mode [ 234.289083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.381656] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.405711] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.415929] device bridge_slave_1 entered promiscuous mode [ 234.544102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.583216] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.600169] team0: Port device team_slave_0 added [ 234.633939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.648637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.719418] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.733994] team0: Port device team_slave_1 added [ 234.755168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.836896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.896793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.985959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.993093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.001697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.020522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.084660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.113556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.130758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.149426] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.163596] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.170964] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.178493] device bridge_slave_0 entered promiscuous mode [ 235.224310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.246065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.264845] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.286409] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.295001] device bridge_slave_1 entered promiscuous mode [ 235.314442] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.336948] team0: Port device team_slave_0 added [ 235.351049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.375985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.385149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.453864] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.461481] team0: Port device team_slave_1 added [ 235.485711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.510745] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.540956] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.552636] device bridge_slave_0 entered promiscuous mode [ 235.596119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.679628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.690364] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.710760] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.724369] device bridge_slave_1 entered promiscuous mode [ 235.735600] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.743390] team0: Port device team_slave_0 added [ 235.779459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.797381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.806284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.814237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.856599] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.870488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.896520] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.916376] team0: Port device team_slave_1 added [ 235.931811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.947302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.955217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.982448] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.006879] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.013353] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.035013] device bridge_slave_0 entered promiscuous mode [ 236.060783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.076053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.083813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.106215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.129160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.167277] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.173681] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.193566] device bridge_slave_1 entered promiscuous mode [ 236.208632] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.228542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.238168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.245120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.267712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.301334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.313182] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.322830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.345224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.368271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.386224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.395977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 236.430749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.449398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.470895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.496624] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.502996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.509657] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.516042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.529922] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.536438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.556142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.628630] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.649648] team0: Port device team_slave_0 added [ 236.683332] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.767403] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.788141] team0: Port device team_slave_1 added [ 236.810505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.855746] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.870302] team0: Port device team_slave_0 added [ 236.916236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.941873] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.956830] team0: Port device team_slave_1 added [ 237.001359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.068905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.083493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.117484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.126090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.133905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.160424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.186135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.193990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.222712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.243175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.251563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.303480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.316760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.327044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.389947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.397987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.411396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.427638] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.434026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.440704] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.447100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.456906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 237.464035] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.482805] team0: Port device team_slave_0 added [ 237.566207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.579193] team0: Port device team_slave_1 added [ 237.719069] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.725613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.732304] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.738698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.753898] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 237.766232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.794237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.866667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.874114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.892180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.964395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.976684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.992405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.080633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.095002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.548038] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.554459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.561150] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.567543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.577537] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.653175] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.659590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.666260] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.672631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.689355] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.094847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.102466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.125758] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.132128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.138784] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.145134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.153417] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.156083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.925911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.312796] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.444772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.682756] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.696110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.704643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.810362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.052495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.134241] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.239563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.266561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.273568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.336205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.470755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.525799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.647625] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.687225] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.811520] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.835888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.842939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.868667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.029186] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.035395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.047872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.161390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.254142] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.277390] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.285551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.293390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.373673] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.564393] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.699139] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.912043] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.925955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.935469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.236616] 8021q: adding VLAN 0 to HW filter on device team0 20:29:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="60596335b073f07dfb5c345ac8e7ecb0f6262efc65905bd3a7f6c16cc3ec3e352cf50fef97aa5bb8ab154649ed8f9af918e72019e6e201860aa8c2b9c4587fc5513791465a9b7e43298323aa96038238dbadab30e1adfbcfacd5b1d810408142400434054ca8beb95cc907b62cc3b54d4ecdb323c7cf0f05dd3f5292fa7f100f9f8ecb5ab0d28c7b228eecd2198a7b8096901f0b376abb321448cd8dbbdf41800bcd5dd86509c6be42c53309d88366b80e381fc316e3abd43f6cc98db5b55ac839ca28246913c18d173104636a36460e9394784ac534c8f68237d77b92ff3be2ba81c68f8198", 0xe6, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='.dead\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="daba7253b4cc4583a767e754f554b1d1060e9fd129b0abf691859fe534edfc36517223c96c3c31cd78a6c9dab2cbd15c0159c15779fe7870285bb8ad144282197294427f35b0b784016eaa18e9b3d2aad70eeaddee05e8cd68bfdcb51155de", 0x5f, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)="d6b8b065aab40b098c59b3f1af8c06c78638923cb21eb21257564201e2c8392621bf4e73e2decf41f1dd4d584a10d636e447363fd83df8dae7d7d4e119f31b88208467a6823b373c183c540fd04cc52ccf50b8ccce52d1611fcd3f4808ac44f97d0424695edd09a9cbabb0a98990b19f690ebfb5272f2f4148707def7dc5", 0x7e, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, r2, r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x204400) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000140)={0x5, 0x100000000, {0x55, 0x0, 0x2, {0x401, 0x81}, {0x3f, 0xc2}, @const={0x8, {0x10001, 0x80000000, 0x7, 0x5}}}, {0x56, 0x8, 0x3, {0x0, 0xffffffff}, {0x3, 0x9}, @const={0x7bf, {0x2, 0x40, 0xe, 0xfffffffffffffffb}}}}) [ 244.546633] encrypted_key: master key parameter ' [ 244.546633] ¹XQ7FZ~C)#8ۭ0Ϭձ@B@4L\,õMNͳ#?RZҌ{"{ 7j2H͍A ]e' is invalid [ 244.645287] encrypted_key: master key parameter ' [ 244.645287] ¹XQ7FZ~C)#8ۭ0Ϭձ@B@4L\,õMNͳ#?RZҌ{"{ 7j2H͍A ]e' is invalid 20:29:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tee(r1, r0, 0x80, 0x8) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00006c4f60)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) write(r1, &(0x7f0000000080), 0x2e4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000785000), 0x4) writev(r2, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003200)=[{{&(0x7f0000001ec0)=@generic, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001f40)=""/4096, 0x1000}], 0x1, &(0x7f0000002f80)=""/214, 0xd6}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003080)=""/106, 0x6a}], 0x1, &(0x7f0000003140)=""/137, 0x89}}], 0x2, 0x1dc03, &(0x7f0000003340)={0x0, r4+10000000}) 20:29:19 executing program 1: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f0000000480)="2206297b6895b66147b3c7218a9169a85ea0bdc9e1587a57d422b5ae5c135342e33089754c8107c3cd3923dd4a71c2ff0f6e7b6b4816122d2550689eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000000000000000b4ec24c53d3d661ff5ff70e4880617bac218cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe273f4772539844a12876dc0217de9b895c949bc32336eb852064e0791b63d541f79", 0xc0, 0xfffffffffffffffe) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x100, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140)) r2 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000003c0)="a5", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r0, r2}, &(0x7f0000000080)=""/114, 0x72, &(0x7f0000000240)={&(0x7f0000000040)={'sha224-generic\x00'}}) 20:29:20 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x24000, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = semget(0x3, 0x1, 0x80) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x6]) r2 = getpid() r3 = memfd_create(&(0x7f0000000100)='/de\b\x00full\x00', 0x4) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) socket(0x0, 0x7, 0x3) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) fallocate(r3, 0x0, 0x0, 0x4ff) 20:29:20 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0), &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000200)=0x3, 0x4) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000040)=0xe8) setregid(0x0, r2) rmdir(&(0x7f0000000240)='./file0//ile0\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 20:29:20 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r1 = dup3(r0, r0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x0, 0x5, 0x5, 0x7e86}, 0x7, [0xffffffff00000001, 0x2, 0x2, 0x43, 0x329, 0x2, 0x100000001, 0x2, 0x3, 0x7, 0x0, 0x1, 0x2ae9, 0x1, 0x8, 0x926f, 0x9, 0x6, 0x968, 0x313, 0x8, 0xffff, 0x9, 0xfb, 0x7, 0xf2a7, 0x1, 0x2, 0x9, 0x1, 0x2, 0x7fff, 0x9, 0x7f, 0x3, 0x738, 0x842, 0x412, 0xffffffff, 0x7b61, 0x40, 0x1, 0x8900000000000000, 0x9f7, 0xc580b0f, 0xfff, 0x0, 0x5, 0xff, 0x10001, 0x2, 0x10001, 0x3, 0x3, 0x2, 0x6, 0x67, 0x1, 0x6, 0x3, 0x8, 0xb4b, 0x5, 0x3], [0x3, 0x3, 0x3, 0x5b2, 0x4, 0x1, 0x4, 0x3, 0x6f, 0x6, 0x1, 0x3, 0x7784, 0x81, 0x101, 0x7, 0x0, 0x7fffffff, 0x9, 0x2, 0x5, 0x6, 0xfffffffffffff4ca, 0x6, 0x8, 0xea41, 0x9, 0x7, 0xffff, 0x37, 0x1, 0x10000, 0x1ff, 0x2, 0x1, 0x8000, 0x1ff, 0x2, 0x4, 0xf1, 0x9, 0x5f8, 0x7, 0x6, 0x200, 0x1, 0x771, 0x80000001, 0xb6, 0x401, 0xdf71, 0x3, 0x9, 0x7, 0x5, 0x8, 0x8, 0x1f, 0x400, 0x2, 0xc0, 0x8, 0x1, 0x3], [0x6, 0xffffffff, 0x100000001, 0x9, 0x1, 0x3c, 0x8d, 0xfff, 0x1, 0xffffffffffffff00, 0xfffffffffffffffb, 0x4, 0x4, 0xee, 0xc724, 0x80000000, 0x80, 0xbee, 0xfff, 0x0, 0x0, 0x5, 0x4, 0x40, 0x1c0000000, 0x26c, 0x8, 0x0, 0x7, 0xb59, 0x7, 0xffffffffffff7fff, 0x5, 0x19, 0x9, 0x40, 0x401, 0x1, 0x2, 0x510, 0x200, 0x4, 0x1, 0x8000, 0x4, 0x4, 0x6, 0x6, 0xb9, 0x8, 0x4, 0x8aa, 0x3, 0x7012, 0x2e, 0x80000000, 0x8, 0x6, 0x4, 0x800, 0x2, 0x80000001, 0x80, 0x8], [0x1, 0x2, 0x8, 0x6, 0x4, 0x6f40, 0x7, 0x5, 0x5, 0x40, 0x1, 0x20, 0x7, 0x3ff, 0xe288, 0x3, 0x5, 0x6, 0x1, 0x1, 0xfff, 0x4, 0x9, 0xfffffffffffffffe, 0x4, 0x7, 0x9, 0x8, 0x4, 0x0, 0x4, 0x1, 0x5, 0xc0000, 0x4, 0x2, 0x147, 0x5, 0xe541, 0xffffffffffff8001, 0x8001, 0x2, 0x6, 0xfffffffffffffffa, 0x3ff, 0x8, 0x7f, 0xa25, 0x0, 0x4, 0x4801, 0xfff, 0x8, 0x10000, 0x76, 0x2, 0xb7, 0x20, 0x6, 0x5, 0x3, 0xffffffff, 0xbd9d, 0x6]}, 0x45c) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f00000000c0)) r3 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000600)={{0x6, 0x2, 0x3, 0x6, '\x00', 0x6}, 0x0, [0x80, 0x0, 0x2, 0xfffffffffffffffe, 0x3, 0x1de, 0x3, 0x1, 0xcfb2, 0x80000001, 0x4, 0x6, 0xffffffffffff49c0, 0x2, 0xefb, 0x8, 0x40, 0xffff, 0x80000000, 0x100000001, 0x7, 0x8, 0x2, 0x3, 0x70, 0x8, 0x7ff, 0x5, 0xff, 0x9, 0x2, 0x2, 0x6, 0x5, 0x5, 0xc7f, 0x3, 0x6, 0x3, 0x7, 0x3, 0x4, 0x8e3, 0x1, 0x3f, 0x5, 0xda4, 0x7f, 0xfc00000000000000, 0x4e90a805, 0x938b, 0x8, 0x1f, 0x8000, 0x3, 0x4, 0x0, 0x0, 0x8c8, 0x0, 0x48, 0x5, 0x5, 0x10000000, 0x4, 0x5, 0x0, 0x1, 0x1, 0x3, 0x4, 0x46c0710b, 0x100000000, 0x8, 0x2, 0x100000001, 0x3f, 0x8, 0xa3, 0x20, 0x7ff800, 0x5, 0x101, 0x84, 0x8000, 0x3f, 0x2, 0x200, 0x800, 0x9, 0xb2bf, 0x48, 0x0, 0xc, 0x2, 0x1, 0x4, 0x1, 0x100000001, 0x9, 0xff, 0x4, 0x9, 0x1, 0x3, 0x9a5, 0x101, 0x2, 0x1, 0x1, 0xff5, 0x10, 0x7e5, 0x0, 0x9, 0x9, 0x1, 0x2, 0x81, 0x9, 0x0, 0x401, 0x7, 0xfffffffffffffff8, 0x10001, 0xfdb, 0x101, 0xfff], {0x0, 0x989680}}) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x820, &(0x7f00000005c0)={[{@noblock_validity='noblock_validity'}, {@usrquota='usrquota'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0x20) [ 245.446278] ================================================================== [ 245.446343] EXT4-fs (sda1): re-mounted. Opts: noblock_validity,usrquota,jqfmt=vfsv0,,errors=continue [ 245.453738] BUG: KASAN: use-after-free in ext4_data_block_valid+0x2d5/0x330 [ 245.453750] Read of size 8 at addr ffff8801c9d69750 by task udevd/7601 [ 245.453754] [ 245.453773] CPU: 0 PID: 7601 Comm: udevd Not tainted 4.19.0-rc6-next-20181005+ #88 [ 245.486177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 20:29:20 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 245.486184] Call Trace: [ 245.486204] dump_stack+0x1d3/0x2c4 [ 245.486223] ? dump_stack_print_info.cold.2+0x52/0x52 [ 245.486243] ? printk+0xa7/0xcf [ 245.510368] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 245.510393] print_address_description.cold.8+0x9/0x1ff [ 245.510411] kasan_report.cold.9+0x242/0x309 [ 245.510425] ? ext4_data_block_valid+0x2d5/0x330 [ 245.510444] __asan_report_load8_noabort+0x14/0x20 [ 245.510458] ext4_data_block_valid+0x2d5/0x330 [ 245.510477] __check_block_validity.constprop.79+0xc1/0x210 [ 245.510491] ? kasan_slab_alloc+0x12/0x20 [ 245.510509] ext4_map_blocks+0x1029/0x1b60 [ 245.553854] ? d_set_d_op+0x31d/0x410 [ 245.557710] ? ext4_issue_zeroout+0x190/0x190 [ 245.562233] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 245.567686] kauditd_printk_skb: 3 callbacks suppressed [ 245.567701] audit: type=1804 audit(1538857760.337:31): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir390569046/syzkaller.KixGbc/1/bus" dev="sda1" ino=16523 res=1 20:29:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in, @in6}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffef3, &(0x7f0000000ec0), 0x0, &(0x7f00000025c0)}, 0xc100) sendmsg(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a80)="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", 0x4d9}], 0x1, &(0x7f0000000280)}, 0x0) [ 245.567797] ext4_getblk+0x4f2/0x630 [ 245.573189] audit: type=1804 audit(1538857760.337:32): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir390569046/syzkaller.KixGbc/1/bus" dev="sda1" ino=16523 res=1 [ 245.596432] ? ext4_iomap_begin+0x1390/0x1390 [ 245.596448] ? zap_class+0x640/0x640 [ 245.596464] ? memset+0x31/0x40 [ 245.596480] ext4_bread_batch+0x7f/0x440 [ 245.596500] ext4_find_entry+0xd49/0x1b70 [ 245.613092] audit: type=1804 audit(1538857760.337:33): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir390569046/syzkaller.KixGbc/1/bus" dev="sda1" ino=16523 res=1 [ 245.623564] ? ext4_search_dir+0x6c0/0x6c0 [ 245.623581] ? mark_held_locks+0x130/0x130 [ 245.623605] ? __d_lookup_rcu+0xaa0/0xaa0 [ 245.623625] ? perf_trace_lock+0x14d/0x7a0 [ 245.683720] ? zap_class+0x640/0x640 [ 245.687460] ? lock_downgrade+0x900/0x900 [ 245.691616] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 245.696715] ? zap_class+0x640/0x640 [ 245.700435] ? lockref_get_not_dead+0x70/0x90 [ 245.704932] ? __lockdep_init_map+0x105/0x590 [ 245.709678] ext4_lookup+0x15b/0x700 [ 245.713395] ? __init_waitqueue_head+0x9e/0x150 [ 245.718064] ? ext4_cross_rename+0x1cf0/0x1cf0 [ 245.722648] ? lock_acquire+0x1ed/0x520 [ 245.726902] __lookup_slow+0x2b5/0x540 [ 245.730805] ? vfs_unlink+0x510/0x510 [ 245.734610] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 245.739691] ? __follow_mount_rcu.isra.33.part.34+0x890/0x890 [ 245.745577] ? path_init+0x157a/0x1ed0 [ 245.749479] lookup_slow+0x57/0x80 [ 245.753035] walk_component+0x92b/0x25b0 [ 245.757097] ? trace_hardirqs_on+0xbd/0x310 [ 245.761422] ? path_init+0x157a/0x1ed0 [ 245.765341] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 245.770802] ? path_init+0x1ed0/0x1ed0 [ 245.774702] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 245.779729] ? set_root+0x42b/0x810 [ 245.783412] ? lookup_open+0x1b90/0x1b90 [ 245.787611] ? trace_hardirqs_on+0xbd/0x310 [ 245.791935] ? path_openat+0x220/0x5160 [ 245.795912] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 245.801482] ? debug_mutex_init+0x2d/0x60 [ 245.805642] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 245.810684] ? nd_jump_root+0x1f0/0x3d0 [ 245.814814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.820359] ? security_inode_permission+0xd2/0x100 [ 245.825379] ? inode_permission+0xb2/0x560 [ 245.829617] link_path_walk.part.40+0xa61/0x1530 [ 245.834374] ? pick_link+0xaf0/0xaf0 [ 245.838104] ? walk_component+0x25b0/0x25b0 [ 245.842429] ? debug_smp_processor_id+0x1c/0x20 [ 245.847096] ? perf_trace_lock+0x14d/0x7a0 [ 245.851354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.856915] ? check_preemption_disabled+0x48/0x200 [ 245.862198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.867833] ? percpu_counter_add_batch+0x141/0x190 [ 245.872873] path_openat+0x270/0x5160 [ 245.876710] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 245.881784] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 245.886707] ? path_lookupat.isra.43+0xc00/0xc00 [ 245.891490] ? is_bpf_text_address+0xac/0x170 [ 245.896006] ? lock_downgrade+0x900/0x900 [ 245.900184] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 245.905118] ? kasan_check_read+0x11/0x20 [ 245.909269] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 245.914588] ? rcu_softirq_qs+0x20/0x20 [ 245.918562] ? unwind_dump+0x190/0x190 [ 245.922456] ? is_bpf_text_address+0xd3/0x170 [ 245.926956] ? kernel_text_address+0x79/0xf0 [ 245.931370] ? __kernel_text_address+0xd/0x40 [ 245.935868] ? unwind_get_return_address+0x61/0xa0 [ 245.940800] ? __save_stack_trace+0x8d/0xf0 [ 245.945129] ? save_stack+0xa9/0xd0 [ 245.948757] ? save_stack+0x43/0xd0 [ 245.952384] ? kasan_kmalloc+0xc7/0xe0 [ 245.956269] ? kasan_slab_alloc+0x12/0x20 [ 245.960442] ? kmem_cache_alloc+0x12e/0x730 [ 245.964766] do_filp_open+0x255/0x380 [ 245.968576] ? may_open_dev+0x100/0x100 [ 245.972552] ? __x64_sys_execve+0x8f/0xc0 [ 245.976705] ? cache_grow_end+0xa8/0x190 [ 245.980768] ? lock_downgrade+0x900/0x900 [ 245.984917] ? kasan_check_read+0x11/0x20 [ 245.989224] ? do_raw_spin_unlock+0xa7/0x2f0 [ 245.993635] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 245.998222] do_open_execat+0x221/0x8e0 [ 246.002205] ? getname_kernel+0x54/0x370 [ 246.006282] ? unregister_binfmt+0x2a0/0x2a0 [ 246.010733] ? kasan_slab_alloc+0x12/0x20 [ 246.014891] ? memcpy+0x45/0x50 [ 246.018178] open_exec+0x53/0x70 [ 246.021720] load_elf_binary+0x96e/0x5620 [ 246.025868] ? kasan_check_write+0x14/0x20 [ 246.030112] ? do_raw_read_unlock+0x3f/0x60 [ 246.034439] ? zap_class+0x640/0x640 [ 246.038165] ? search_binary_handler+0x12e/0x570 [ 246.042938] ? notesize.isra.6+0x80/0x80 [ 246.047002] ? lock_downgrade+0x900/0x900 [ 246.051156] ? kasan_check_write+0x14/0x20 [ 246.055406] search_binary_handler+0x17d/0x570 [ 246.060023] __do_execve_file.isra.33+0x1661/0x25d0 [ 246.065059] ? prepare_bprm_creds+0x120/0x120 [ 246.069557] ? usercopy_warn+0x110/0x110 [ 246.073622] ? fs_reclaim_acquire+0x20/0x20 [ 246.077949] ? lock_downgrade+0x900/0x900 [ 246.082118] ? trace_hardirqs_on+0xbd/0x310 [ 246.086448] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 246.091986] ? strncpy_from_user+0x3be/0x510 [ 246.096454] ? digsig_verify+0x1530/0x1530 [ 246.100692] ? kmem_cache_alloc+0x306/0x730 [ 246.105018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.110612] ? getname_flags+0x26e/0x590 [ 246.114679] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 246.120224] __x64_sys_execve+0x8f/0xc0 [ 246.124220] do_syscall_64+0x1b9/0x820 [ 246.128224] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 246.133604] ? syscall_return_slowpath+0x5e0/0x5e0 [ 246.138666] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.143521] ? trace_hardirqs_on_caller+0x310/0x310 [ 246.148538] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 246.153554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.159092] ? prepare_exit_to_usermode+0x291/0x3b0 [ 246.164229] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.169077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 246.174264] RIP: 0033:0x7f2bbf08f207 [ 246.178052] Code: 77 19 f4 48 89 d7 44 89 c0 0f 05 48 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 f7 d8 64 41 89 01 eb df b8 3b 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 f3 c3 48 8b 15 00 8c 2d 00 f7 d8 64 89 02 [ 246.197121] RSP: 002b:00007ffd2c826328 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 246.204839] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f2bbf08f207 [ 246.212263] RDX: 00000000007e69a0 RSI: 00007ffd2c826420 RDI: 00007ffd2c827430 [ 246.219531] RBP: 0000000000625500 R08: 0000000000000d86 R09: 0000000000000d86 [ 246.226887] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000007e69a0 [ 246.234167] R13: 0000000000000007 R14: 00000000007e5250 R15: 0000000000000005 [ 246.241443] [ 246.243208] Allocated by task 1: [ 246.246575] save_stack+0x43/0xd0 [ 246.250026] kasan_kmalloc+0xc7/0xe0 [ 246.253737] kasan_slab_alloc+0x12/0x20 [ 246.257708] kmem_cache_alloc+0x12e/0x730 [ 246.261862] add_system_zone+0x2e5/0x5f0 [ 246.266000] ext4_setup_system_zone+0x208/0x520 [ 246.270669] ext4_fill_super+0x8181/0xdab0 [ 246.274988] mount_bdev+0x314/0x3e0 [ 246.278611] ext4_mount+0x3c/0x50 [ 246.282063] legacy_get_tree+0x131/0x460 [ 246.286132] vfs_get_tree+0x1cb/0x5c0 [ 246.289934] do_mount+0x70c/0x1d90 [ 246.293471] ksys_mount+0x12d/0x140 [ 246.297218] do_mount_root+0x35/0x1d3 [ 246.301019] mount_block_root+0x39c/0x6ed [ 246.305220] mount_root+0x2d3/0x31a [ 246.308855] prepare_namespace+0x26c/0x2ab [ 246.313356] kernel_init_freeable+0x590/0x5ae [ 246.317877] kernel_init+0x11/0x1b2 [ 246.321526] ret_from_fork+0x3a/0x50 [ 246.325319] [ 246.326961] Freed by task 7593: [ 246.330246] save_stack+0x43/0xd0 [ 246.333697] __kasan_slab_free+0x102/0x150 [ 246.337927] kasan_slab_free+0xe/0x10 [ 246.341792] kmem_cache_free+0x83/0x290 [ 246.345779] ext4_release_system_zone+0x7c/0x110 [ 246.350545] ext4_setup_system_zone+0x3ef/0x520 [ 246.355212] ext4_remount+0x1451/0x2640 [ 246.359196] legacy_reconfigure+0x14c/0x1c0 [ 246.363532] reconfigure_super+0x4c0/0xbb0 [ 246.367768] do_mount+0x18b9/0x1d90 [ 246.371399] ksys_mount+0x12d/0x140 [ 246.375026] __x64_sys_mount+0xbe/0x150 [ 246.379062] do_syscall_64+0x1b9/0x820 [ 246.383003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 246.388185] [ 246.389812] The buggy address belongs to the object at ffff8801c9d69738 [ 246.389812] which belongs to the cache ext4_system_zone of size 40 [ 246.402826] The buggy address is located 24 bytes inside of [ 246.402826] 40-byte region [ffff8801c9d69738, ffff8801c9d69760) [ 246.414683] The buggy address belongs to the page: [ 246.419796] page:ffffea0007275a40 count:1 mapcount:0 mapping:ffff8801d4490780 index:0xffff8801c9d69fb9 [ 246.429249] flags: 0x2fffc0000000200(slab) [ 246.433499] raw: 02fffc0000000200 ffff8801d4491d38 ffff8801d4491d38 ffff8801d4490780 [ 246.441381] raw: ffff8801c9d69fb9 ffff8801c9d69000 0000000100000006 0000000000000000 [ 246.449256] page dumped because: kasan: bad access detected [ 246.454958] [ 246.456630] Memory state around the buggy address: [ 246.461568] ffff8801c9d69600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.468927] ffff8801c9d69680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.476281] >ffff8801c9d69700: fc fc fc fc fc fc fc fb fb fb fb fb fc fc fb fb [ 246.483813] ^ [ 246.489802] ffff8801c9d69780: fb fb fb fc fc fb fb fb fb fb fc fc fb fb fb fb 20:29:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1c, 0x6, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x4080) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000080)={@broadcast}, &(0x7f0000000140)=0x8) signalfd(r0, &(0x7f0000000180)={0x9}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) [ 246.497168] ffff8801c9d69800: fb fc fc fb fb fb fb fb fc fc fb fb fb fb fb fc [ 246.504707] ================================================================== [ 246.518061] Kernel panic - not syncing: panic_on_warn set ... [ 246.518061] [ 246.525471] CPU: 0 PID: 7601 Comm: udevd Tainted: G B 4.19.0-rc6-next-20181005+ #88 [ 246.534587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.543970] Call Trace: [ 246.546585] dump_stack+0x1d3/0x2c4 [ 246.550240] ? dump_stack_print_info.cold.2+0x52/0x52 [ 246.555465] panic+0x238/0x4e7 [ 246.558685] ? add_taint.cold.5+0x16/0x16 [ 246.562862] ? preempt_schedule+0x4d/0x60 [ 246.567125] ? ___preempt_schedule+0x16/0x18 [ 246.571555] ? trace_hardirqs_on+0xb4/0x310 [ 246.575995] kasan_end_report+0x47/0x4f [ 246.579993] kasan_report.cold.9+0x76/0x309 [ 246.584358] ? ext4_data_block_valid+0x2d5/0x330 [ 246.589139] __asan_report_load8_noabort+0x14/0x20 [ 246.594095] ext4_data_block_valid+0x2d5/0x330 [ 246.598705] __check_block_validity.constprop.79+0xc1/0x210 [ 246.601957] kobject: 'loop0' (000000008c8efea5): kobject_uevent_env [ 246.604442] ? kasan_slab_alloc+0x12/0x20 [ 246.613447] kobject: 'loop0' (000000008c8efea5): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 246.615024] ext4_map_blocks+0x1029/0x1b60 [ 246.628821] ? d_set_d_op+0x31d/0x410 [ 246.632656] ? ext4_issue_zeroout+0x190/0x190 [ 246.637278] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 246.642957] ext4_getblk+0x4f2/0x630 [ 246.646722] ? ext4_iomap_begin+0x1390/0x1390 [ 246.651217] ? zap_class+0x640/0x640 [ 246.654929] ? memset+0x31/0x40 [ 246.658258] ext4_bread_batch+0x7f/0x440 [ 246.662422] ext4_find_entry+0xd49/0x1b70 [ 246.666578] ? ext4_search_dir+0x6c0/0x6c0 [ 246.670813] ? mark_held_locks+0x130/0x130 [ 246.675206] ? __d_lookup_rcu+0xaa0/0xaa0 [ 246.679358] ? perf_trace_lock+0x14d/0x7a0 [ 246.683593] ? zap_class+0x640/0x640 [ 246.687338] ? lock_downgrade+0x900/0x900 [ 246.691487] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 246.696478] ? zap_class+0x640/0x640 [ 246.700196] ? lockref_get_not_dead+0x70/0x90 [ 246.704744] ? __lockdep_init_map+0x105/0x590 [ 246.709241] ext4_lookup+0x15b/0x700 [ 246.712954] ? __init_waitqueue_head+0x9e/0x150 [ 246.717624] ? ext4_cross_rename+0x1cf0/0x1cf0 [ 246.722253] ? lock_acquire+0x1ed/0x520 [ 246.726229] __lookup_slow+0x2b5/0x540 [ 246.730115] ? vfs_unlink+0x510/0x510 [ 246.733913] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 246.738935] ? __follow_mount_rcu.isra.33.part.34+0x890/0x890 [ 246.744828] ? path_init+0x157a/0x1ed0 [ 246.748716] lookup_slow+0x57/0x80 [ 246.752255] walk_component+0x92b/0x25b0 [ 246.756340] ? trace_hardirqs_on+0xbd/0x310 [ 246.760662] ? path_init+0x157a/0x1ed0 [ 246.764548] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 246.770050] ? path_init+0x1ed0/0x1ed0 [ 246.773938] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 246.778976] ? set_root+0x42b/0x810 [ 246.782603] ? lookup_open+0x1b90/0x1b90 [ 246.786662] ? trace_hardirqs_on+0xbd/0x310 [ 246.790979] ? path_openat+0x220/0x5160 [ 246.794952] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 246.800406] ? debug_mutex_init+0x2d/0x60 [ 246.804603] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 246.809620] ? nd_jump_root+0x1f0/0x3d0 [ 246.813650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.819240] ? security_inode_permission+0xd2/0x100 [ 246.824274] ? inode_permission+0xb2/0x560 [ 246.828540] link_path_walk.part.40+0xa61/0x1530 [ 246.833293] ? pick_link+0xaf0/0xaf0 [ 246.837049] ? walk_component+0x25b0/0x25b0 [ 246.841375] ? debug_smp_processor_id+0x1c/0x20 [ 246.846044] ? perf_trace_lock+0x14d/0x7a0 [ 246.850280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.855843] ? check_preemption_disabled+0x48/0x200 [ 246.860972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.866509] ? percpu_counter_add_batch+0x141/0x190 [ 246.871589] path_openat+0x270/0x5160 [ 246.875508] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 246.880525] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 246.885284] ? path_lookupat.isra.43+0xc00/0xc00 [ 246.890209] ? is_bpf_text_address+0xac/0x170 [ 246.894704] ? lock_downgrade+0x900/0x900 [ 246.898853] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 246.903783] ? kasan_check_read+0x11/0x20 [ 246.907942] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 246.913268] ? rcu_softirq_qs+0x20/0x20 [ 246.917242] ? unwind_dump+0x190/0x190 [ 246.921131] ? is_bpf_text_address+0xd3/0x170 [ 246.925641] ? kernel_text_address+0x79/0xf0 [ 246.930114] ? __kernel_text_address+0xd/0x40 [ 246.934619] ? unwind_get_return_address+0x61/0xa0 [ 246.939600] ? __save_stack_trace+0x8d/0xf0 [ 246.943928] ? save_stack+0xa9/0xd0 [ 246.947554] ? save_stack+0x43/0xd0 [ 246.951178] ? kasan_kmalloc+0xc7/0xe0 [ 246.955063] ? kasan_slab_alloc+0x12/0x20 [ 246.959259] ? kmem_cache_alloc+0x12e/0x730 [ 246.963585] do_filp_open+0x255/0x380 [ 246.967390] ? may_open_dev+0x100/0x100 [ 246.971413] ? __x64_sys_execve+0x8f/0xc0 [ 246.975564] ? cache_grow_end+0xa8/0x190 [ 246.979639] ? lock_downgrade+0x900/0x900 [ 246.983804] ? kasan_check_read+0x11/0x20 [ 246.987955] ? do_raw_spin_unlock+0xa7/0x2f0 [ 246.992414] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 246.996995] do_open_execat+0x221/0x8e0 [ 247.000966] ? getname_kernel+0x54/0x370 [ 247.005024] ? unregister_binfmt+0x2a0/0x2a0 [ 247.009432] ? kasan_slab_alloc+0x12/0x20 [ 247.013632] ? memcpy+0x45/0x50 [ 247.016913] open_exec+0x53/0x70 [ 247.020283] load_elf_binary+0x96e/0x5620 [ 247.024456] ? kasan_check_write+0x14/0x20 [ 247.028687] ? do_raw_read_unlock+0x3f/0x60 [ 247.033007] ? zap_class+0x640/0x640 [ 247.036770] ? search_binary_handler+0x12e/0x570 [ 247.041577] ? notesize.isra.6+0x80/0x80 [ 247.045646] ? lock_downgrade+0x900/0x900 [ 247.049810] ? kasan_check_write+0x14/0x20 [ 247.054111] search_binary_handler+0x17d/0x570 [ 247.058697] __do_execve_file.isra.33+0x1661/0x25d0 [ 247.063767] ? prepare_bprm_creds+0x120/0x120 [ 247.068262] ? usercopy_warn+0x110/0x110 [ 247.072358] ? fs_reclaim_acquire+0x20/0x20 [ 247.076693] ? lock_downgrade+0x900/0x900 [ 247.080846] ? trace_hardirqs_on+0xbd/0x310 [ 247.085170] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.090759] ? strncpy_from_user+0x3be/0x510 [ 247.095257] ? digsig_verify+0x1530/0x1530 [ 247.099491] ? kmem_cache_alloc+0x306/0x730 [ 247.103813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.109357] ? getname_flags+0x26e/0x590 [ 247.113526] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 247.119091] __x64_sys_execve+0x8f/0xc0 [ 247.123065] do_syscall_64+0x1b9/0x820 [ 247.126967] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 247.132357] ? syscall_return_slowpath+0x5e0/0x5e0 [ 247.137284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.142157] ? trace_hardirqs_on_caller+0x310/0x310 [ 247.147174] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 247.152189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.157724] ? prepare_exit_to_usermode+0x291/0x3b0 [ 247.162738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.167581] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.172765] RIP: 0033:0x7f2bbf08f207 [ 247.176477] Code: 77 19 f4 48 89 d7 44 89 c0 0f 05 48 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 f7 d8 64 41 89 01 eb df b8 3b 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 f3 c3 48 8b 15 00 8c 2d 00 f7 d8 64 89 02 [ 247.195426] RSP: 002b:00007ffd2c826328 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 247.203261] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f2bbf08f207 [ 247.210528] RDX: 00000000007e69a0 RSI: 00007ffd2c826420 RDI: 00007ffd2c827430 [ 247.217797] RBP: 0000000000625500 R08: 0000000000000d86 R09: 0000000000000d86 [ 247.225150] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000007e69a0 [ 247.232470] R13: 0000000000000007 R14: 00000000007e5250 R15: 0000000000000005 [ 247.241020] Kernel Offset: disabled [ 247.244659] Rebooting in 86400 seconds..