bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x2, 0x5}, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) accept4$alg(r1, 0x0, 0x0, 0x80000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) pread64(r0, &(0x7f0000000040)=""/201, 0xc9, 0x5b) [ 306.651949][ T26] audit: type=1800 audit(1563108591.126:91): pid=10241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16959 res=0 12:49:51 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:49:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:49:51 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x404000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 12:49:51 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 306.873036][ T26] audit: type=1800 audit(1563108591.346:92): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16737 res=0 12:49:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 307.124289][ T26] audit: type=1800 audit(1563108591.606:93): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16960 res=0 [ 307.891744][T10268] IPVS: ftp: loaded support on port[0] = 21 [ 308.047665][T10268] chnl_net:caif_netlink_parms(): no params data found [ 308.128315][T10268] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.147316][T10268] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.165941][T10268] device bridge_slave_0 entered promiscuous mode [ 308.179670][T10268] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.189159][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.203124][T10268] device bridge_slave_1 entered promiscuous mode [ 308.251654][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.272411][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.317881][T10268] team0: Port device team_slave_0 added [ 308.331723][T10268] team0: Port device team_slave_1 added [ 308.405404][T10268] device hsr_slave_0 entered promiscuous mode [ 308.443813][T10268] device hsr_slave_1 entered promiscuous mode [ 308.483617][T10268] debugfs: Directory 'hsr0' with parent '/' already present! [ 308.502399][T10268] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.509495][T10268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.516854][T10268] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.523953][T10268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.567034][T10268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.575076][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.582678][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.601354][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.609048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.627140][T10268] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.672114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.681412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.697828][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.704956][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.721938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.730757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.739335][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.746396][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.754080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.762593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.771229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.779953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.788410][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.797150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.812650][T10268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.823950][T10268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.837134][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.845160][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.853685][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.861922][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.870771][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.879741][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.902390][T10268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.068945][T10277] EXT4-fs (sda1): re-mounted. Opts: 12:49:53 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:49:53 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x34) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="9483e54bc7abb3c046e52ccfdfc58b128d9dc2d37fbc7ace49c84b5491f9167b1f3611f58c8c95ce9d05b507d0fb99748fd417175b86518a2a7e129870f2d80359bbdabde98bc8c31911ab538a1fa8b6a52a9c8c1f8768dd3571948aabd6a35526ec5dad1f5df86ce1485b35778ca2b62ea710a46ee24b51a376d7d7cb640cb13575f78c021f45cf3317a799eb3d11d1bd7a548dd81c3b78b07feae45d7e2bf73cc1e0d741610f4e6288b82fb26ce23466c030848a1320e0517f2ce5e0454c221893879fe6acc1011a4b27b76202ef7ea024129d85e0f13585198a02bc7dfc23472662d9e9379bdd87296370a2af6c5a") r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xd5, 0x400) write$P9_ROPEN(r1, &(0x7f0000000080)={0x52e89f8386a69d88, 0x71, 0x0, {{0xc, 0x2, 0x8}, 0x10001}}, 0x18) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000200)=""/106) getitimer(0x0, &(0x7f0000000040)) accept$unix(r1, &(0x7f0000000280), &(0x7f0000000300)=0x6e) r2 = msgget$private(0x0, 0x20) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/46) 12:49:53 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:49:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:49:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:49:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 309.196815][ T26] audit: type=1800 audit(1563108593.676:94): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16561 res=0 12:49:53 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xa3a, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @loopback}, &(0x7f0000000080)=0xc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 12:49:53 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:49:53 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 309.399833][ T26] audit: type=1800 audit(1563108593.876:95): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16705 res=0 12:49:53 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:49:53 executing program 5: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 12:49:54 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:49:54 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:49:54 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x342) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='/dev/midi#\x00', 0xb, 0x2) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000100)={0xfffffffffffffffc, 0x401, [0x2f4, 0x9, 0xeb8, 0x0, 0x197a504d]}) [ 309.615073][ T26] audit: type=1800 audit(1563108594.096:96): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16769 res=0 12:49:54 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 309.884642][ T26] audit: type=1800 audit(1563108594.366:97): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16657 res=0 [ 310.783116][T10322] IPVS: ftp: loaded support on port[0] = 21 [ 311.103011][T10324] IPVS: ftp: loaded support on port[0] = 21 [ 311.427208][T10322] chnl_net:caif_netlink_parms(): no params data found [ 311.749378][T10322] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.756752][T10322] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.764605][T10322] device bridge_slave_0 entered promiscuous mode [ 312.041648][T10322] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.048908][T10322] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.056966][T10322] device bridge_slave_1 entered promiscuous mode [ 312.344860][T10322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.357006][T10324] chnl_net:caif_netlink_parms(): no params data found [ 312.372295][T10322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.406463][T10322] team0: Port device team_slave_0 added [ 312.693481][T10324] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.700919][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.710396][T10324] device bridge_slave_0 entered promiscuous mode [ 312.720403][T10322] team0: Port device team_slave_1 added [ 312.729805][T10324] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.737607][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.745899][T10324] device bridge_slave_1 entered promiscuous mode [ 312.990295][T10324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.003830][T10324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.065773][T10322] device hsr_slave_0 entered promiscuous mode [ 313.104073][T10322] device hsr_slave_1 entered promiscuous mode [ 313.163690][T10322] debugfs: Directory 'hsr0' with parent '/' already present! [ 313.173391][ T7] device bridge_slave_1 left promiscuous mode [ 313.179933][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.224709][ T7] device bridge_slave_0 left promiscuous mode [ 313.230879][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.285820][ T7] device bridge_slave_1 left promiscuous mode [ 313.292029][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.324866][ T7] device bridge_slave_0 left promiscuous mode [ 313.331089][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.374981][ T7] device bridge_slave_1 left promiscuous mode [ 313.381150][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.434320][ T7] device bridge_slave_0 left promiscuous mode [ 313.440471][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.004132][ T7] device hsr_slave_0 left promiscuous mode [ 319.044632][ T7] device hsr_slave_1 left promiscuous mode [ 319.091298][ T7] team0 (unregistering): Port device team_slave_1 removed [ 319.104083][ T7] team0 (unregistering): Port device team_slave_0 removed [ 319.115702][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.169525][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.244747][ T7] bond0 (unregistering): Released all slaves [ 319.374319][ T7] device hsr_slave_0 left promiscuous mode [ 319.413722][ T7] device hsr_slave_1 left promiscuous mode [ 319.463118][ T7] team0 (unregistering): Port device team_slave_1 removed [ 319.476504][ T7] team0 (unregistering): Port device team_slave_0 removed [ 319.487701][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.569241][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.662216][ T7] bond0 (unregistering): Released all slaves [ 319.784222][ T7] device hsr_slave_0 left promiscuous mode [ 319.843828][ T7] device hsr_slave_1 left promiscuous mode [ 319.911174][ T7] team0 (unregistering): Port device team_slave_1 removed [ 319.922457][ T7] team0 (unregistering): Port device team_slave_0 removed [ 319.934664][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.959366][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.041462][ T7] bond0 (unregistering): Released all slaves [ 320.151028][T10324] team0: Port device team_slave_0 added [ 320.160218][T10324] team0: Port device team_slave_1 added [ 320.226026][T10324] device hsr_slave_0 entered promiscuous mode [ 320.263900][T10324] device hsr_slave_1 entered promiscuous mode [ 320.380728][T10322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.409569][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.418067][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.429999][T10322] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.543841][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.552558][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.567045][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.574166][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.588649][T10324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.662556][T10324] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.679001][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.687522][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.696697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.706499][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.713613][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.722260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.731559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.739986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.775310][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.784664][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.793436][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.802857][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.810001][ T8495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.817929][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.827069][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.835724][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.842807][ T8495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.850600][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.860026][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.890624][T10322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.902358][T10322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.915535][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.924494][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.933378][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.942813][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.952474][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.961061][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.970049][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.978897][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.987606][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.996226][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.007141][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.019223][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.030003][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.046609][T10324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.058855][T10324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.075044][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.082905][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.092914][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.101630][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.120283][T10322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.155345][T10324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.396804][T10336] EXT4-fs (sda1): re-mounted. Opts: 12:50:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:06 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:06 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x400000000, &(0x7f0000ffc000/0x4000)=nil) r0 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f00000001c0)='n\x00\x02\x00\xdf\x00z`\xcc\xbc\xfd\x90\x00\xa9\x87f7Hf\x18\x8fm\"\x96\xb9\x13\x0e\xd0\xd9\xeb\x88\xa9\xc1\x9b5\xba\x80', &(0x7f0000000100)={'syz', 0x0}, r1) 12:50:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 321.692662][ T26] audit: type=1800 audit(1563108606.166:98): pid=10352 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16577 res=0 12:50:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:06 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:06 executing program 5: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffc000/0x2000)=nil) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8300, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000180)) unshare(0x4000000) ioctl$TCSETX(r0, 0x5433, &(0x7f00000001c0)={0x1000, 0x3, [0x7f, 0xffff, 0x9, 0x7f, 0x100], 0xffffffffffffffe0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xb7, 0x5, 0x0, "d8ccda207ba7febdfea433335273b850", "0184927c970a619b7eb297eb9bb55d49f1682dab68306538643d9f38ff6339beb79e52be5d06a3583d644558954a85423e5f2d39496e25f9f71dd01684948a09b66ad1b5ed351aa6a906000120d40635c7a392feba1b9bd07131aec50599ff074fc722e870a8b0bc664a7f479de1d4a5e24d7c4cff74e92068acc26d63bf9894b89fdfdc931b12af86f228c532aaca45bc8138f769dd5028f3b9a9d82b6689838346"}, 0xb7, 0x3) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000200)=0xbadd, 0x4) [ 321.949769][ T26] audit: type=1800 audit(1563108606.426:99): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16998 res=0 12:50:06 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:06 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) [ 322.166203][ T26] audit: type=1800 audit(1563108606.646:100): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16998 res=0 12:50:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:07 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:07 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:07 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x97, @remote, 0x101}, r1}}, 0x30) [ 322.854700][ T26] audit: type=1800 audit(1563108607.336:101): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17012 res=0 [ 323.145330][T10392] IPVS: ftp: loaded support on port[0] = 21 [ 323.316059][T10392] chnl_net:caif_netlink_parms(): no params data found [ 323.360292][T10392] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.367810][T10392] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.375818][T10392] device bridge_slave_0 entered promiscuous mode [ 323.393695][T10392] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.401130][T10392] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.409210][T10392] device bridge_slave_1 entered promiscuous mode [ 323.429935][T10392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.440934][T10392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.463095][T10392] team0: Port device team_slave_0 added [ 323.470385][T10392] team0: Port device team_slave_1 added [ 323.539509][T10392] device hsr_slave_0 entered promiscuous mode [ 323.604580][T10392] device hsr_slave_1 entered promiscuous mode [ 323.653714][T10392] debugfs: Directory 'hsr0' with parent '/' already present! [ 323.707558][T10392] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.714724][T10392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.722085][T10392] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.729205][T10392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.758343][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.770549][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.812827][T10392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.833805][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.841602][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.854381][T10392] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.865881][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.874556][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.882900][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.890006][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.901143][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.912587][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.921289][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.928467][ T8495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.944297][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.952821][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.961577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.970324][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.980583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.000257][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.012366][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.028995][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.041198][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.053500][T10392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.072561][T10392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.084801][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.093226][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.113072][T10392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.328163][T10400] EXT4-fs (sda1): re-mounted. Opts: 12:50:08 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:08 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = msgget(0x1, 0x340) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/253) r1 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80800) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'GPL+cpuset%'}, {0x20, 'V'}, {0x20, 'proc\xc2'}, {0x20, 'ppp0'}], 0xa, "23b8109dfb9b9aadabfac5402319ff6999cd755139cc91f0695212e1e7d3424a97d47664b3aed9bf463c3ef2d8184da317aa2df302a39101ee114bad29732ed51ec3f7c4e332789a4b4475fe76754bfde308b5e3e63864d4daaa102b51792851ee795cdb7e5a510d0e935adf233b2b9693b4587459b28965941326f15a270c585856be6c95e0fe1cc520404f3122"}, 0xb2) 12:50:08 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:08 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:08 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80100, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xa, 0x80, 0xe1f, 0x80000, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x0, 0x0) r4 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80) ppoll(&(0x7f0000000180)=[{r0, 0x1102}, {r1, 0x8000}, {r2}, {r3, 0x411}, {r4, 0x10}], 0x5, &(0x7f00000001c0), &(0x7f0000000200)={0x7}, 0x8) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000280)={0x0, 0x6, 0x510b, &(0x7f0000000240)=0x8}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) socket(0x400013, 0x3, 0x102) [ 324.476831][ T26] audit: type=1800 audit(1563108608.956:102): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16865 res=0 12:50:09 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:09 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:09 executing program 5: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x7}}, 0x10) [ 324.783047][ T26] audit: type=1800 audit(1563108609.256:103): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16945 res=0 12:50:09 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:09 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 324.965536][ T26] audit: type=1800 audit(1563108609.446:104): pid=10435 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16913 res=0 [ 326.118188][T10439] IPVS: ftp: loaded support on port[0] = 21 [ 326.422218][T10441] IPVS: ftp: loaded support on port[0] = 21 [ 326.748975][T10439] chnl_net:caif_netlink_parms(): no params data found [ 326.799535][T10439] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.806975][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.814957][T10439] device bridge_slave_0 entered promiscuous mode [ 326.823002][T10439] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.830342][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.838442][T10439] device bridge_slave_1 entered promiscuous mode [ 327.106627][T10439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.118914][T10439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.432208][T10439] team0: Port device team_slave_0 added [ 327.440512][T10441] chnl_net:caif_netlink_parms(): no params data found [ 327.451906][T10439] team0: Port device team_slave_1 added [ 327.826953][T10439] device hsr_slave_0 entered promiscuous mode [ 327.866360][T10439] device hsr_slave_1 entered promiscuous mode [ 327.914668][T10439] debugfs: Directory 'hsr0' with parent '/' already present! [ 328.182704][T10441] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.190316][T10441] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.198219][T10441] device bridge_slave_0 entered promiscuous mode [ 328.207308][T10441] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.214563][T10441] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.222503][T10441] device bridge_slave_1 entered promiscuous mode [ 328.239688][ T7] device bridge_slave_1 left promiscuous mode [ 328.246440][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.304465][ T7] device bridge_slave_0 left promiscuous mode [ 328.310629][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.355651][ T7] device bridge_slave_1 left promiscuous mode [ 328.361851][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.424455][ T7] device bridge_slave_0 left promiscuous mode [ 328.430596][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.475596][ T7] device bridge_slave_1 left promiscuous mode [ 328.481805][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.534882][ T7] device bridge_slave_0 left promiscuous mode [ 328.541093][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.194341][ T7] device hsr_slave_0 left promiscuous mode [ 334.233773][ T7] device hsr_slave_1 left promiscuous mode [ 334.283214][ T7] team0 (unregistering): Port device team_slave_1 removed [ 334.295912][ T7] team0 (unregistering): Port device team_slave_0 removed [ 334.308491][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.349294][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.418949][ T7] bond0 (unregistering): Released all slaves [ 334.564398][ T7] device hsr_slave_0 left promiscuous mode [ 334.633681][ T7] device hsr_slave_1 left promiscuous mode [ 334.682137][ T7] team0 (unregistering): Port device team_slave_1 removed [ 334.694562][ T7] team0 (unregistering): Port device team_slave_0 removed [ 334.707359][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.759116][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.827679][ T7] bond0 (unregistering): Released all slaves [ 334.954302][ T7] device hsr_slave_0 left promiscuous mode [ 334.993760][ T7] device hsr_slave_1 left promiscuous mode [ 335.043131][ T7] team0 (unregistering): Port device team_slave_1 removed [ 335.055634][ T7] team0 (unregistering): Port device team_slave_0 removed [ 335.067048][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.149318][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.222315][ T7] bond0 (unregistering): Released all slaves [ 335.332943][T10441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.344947][T10441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.376725][T10441] team0: Port device team_slave_0 added [ 335.384855][T10441] team0: Port device team_slave_1 added [ 335.456187][T10441] device hsr_slave_0 entered promiscuous mode [ 335.504025][T10441] device hsr_slave_1 entered promiscuous mode [ 335.612603][T10439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.768876][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.776753][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.786903][T10439] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.800140][T10441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.814107][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 335.822025][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.831434][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.840317][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.847432][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.855840][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.864592][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.872997][ T2842] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.880117][ T2842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.902263][T10441] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.918185][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.929647][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.943440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.961221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.970322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.986839][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.995188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.011532][T10439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.029377][T10439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.062607][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.070987][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.089093][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.101885][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.112750][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.126391][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.139420][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.152442][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.167679][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.178268][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.185385][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.200103][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.208942][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.224105][ T2842] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.231175][ T2842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.245837][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.258607][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.293061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.308473][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.319873][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.332201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.360056][T10439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.368499][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.399777][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.408697][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.424741][T10441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.495131][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.825746][T10452] EXT4-fs (sda1): re-mounted. Opts: [ 336.850733][T10457] EXT4-fs (sda1): re-mounted. Opts: 12:50:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:21 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:21 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 12:50:21 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:21 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x29a080, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x1, 0x2, 0x1}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) [ 337.070264][ T26] audit: type=1800 audit(1563108621.546:105): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17003 res=0 12:50:21 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:21 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:21 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xe9, "bab8911d7f433d3e3ef10a4b68de3a5befd63d5086e661172b413348058a9f8dac19ec58f95c7d1f399f335da554e44e036353df9e217074aec8779d676c4306da65b26861a39a8723a125f08fbcff5c676190426a86cbaeeb38e7e1548b62e9e63acfcc719efa03c09f3a4fe8d82040ba3f7fe51b3b480f2a16a8bb0816a77cbac3ef2aece5716b0c2a96916060be3300dd95a90554317774669ab7021f2975448c6c9a47ba67a8d6e556fbf6339ebb2ba19183e76fe934ea9082222448e5edb7c7ac87eb59ed519930e9b8fb1e0b50b45176a3f018179d02ab6c82e5b8076c3f961482b49011fc7d"}, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x95, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}}, [0x2, 0x0, 0x4, 0x5, 0x101, 0x100, 0x2, 0x8, 0x4, 0x1046, 0x1, 0x4dcc19dd, 0xfffffffffffeffff, 0x8, 0x8]}, &(0x7f0000000240)=0x100) [ 337.298687][ T26] audit: type=1800 audit(1563108621.776:106): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17039 res=0 12:50:21 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:21 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 337.592249][ T26] audit: type=1800 audit(1563108622.066:107): pid=10492 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17045 res=0 12:50:22 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:22 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x8000, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) rt_sigreturn() 12:50:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:22 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 338.100613][ T26] audit: type=1800 audit(1563108622.576:108): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16577 res=0 [ 338.632766][T10506] IPVS: ftp: loaded support on port[0] = 21 [ 338.820397][T10506] chnl_net:caif_netlink_parms(): no params data found [ 338.910936][T10506] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.930148][T10506] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.942404][T10506] device bridge_slave_0 entered promiscuous mode [ 338.961291][T10506] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.979525][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.991103][T10506] device bridge_slave_1 entered promiscuous mode [ 339.014853][T10506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.026050][T10506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.045995][T10506] team0: Port device team_slave_0 added [ 339.052961][T10506] team0: Port device team_slave_1 added [ 339.115880][T10506] device hsr_slave_0 entered promiscuous mode [ 339.153868][T10506] device hsr_slave_1 entered promiscuous mode [ 339.193867][T10506] debugfs: Directory 'hsr0' with parent '/' already present! [ 339.301708][T10506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.316308][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.326474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.337149][T10506] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.347800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.356533][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.365083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.372162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.385725][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.393977][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.402970][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.411461][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.418564][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.433793][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.442263][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.451285][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.460384][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.477457][T10506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.487993][T10506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.958037][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.966072][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.974890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.983109][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.994335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.221427][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.236098][T10506] 8021q: adding VLAN 0 to HW filter on device batadv0 12:50:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 340.622653][T10514] EXT4-fs (sda1): re-mounted. Opts: 12:50:25 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:25 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x240000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 12:50:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 340.748097][ T26] audit: type=1800 audit(1563108625.226:109): pid=10523 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16705 res=0 12:50:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:25 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x248201, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x9f0000, 0x1, 0x100000001, [], &(0x7f0000000080)={0x9f097f, 0x3, [], @string=&(0x7f0000000040)=0xffffffff}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000180)={0x9b0000, 0x6, 0xfffffffffffffffc, [], &(0x7f0000000140)={0xbb09ff, 0x8, [], @string=&(0x7f0000000100)=0x8}}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 12:50:25 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 340.918845][ T26] audit: type=1800 audit(1563108625.396:110): pid=10531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16801 res=0 12:50:25 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:25 executing program 5: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) [ 341.124769][ T26] audit: type=1800 audit(1563108625.606:111): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16801 res=0 12:50:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 342.287157][T10550] IPVS: ftp: loaded support on port[0] = 21 [ 342.621642][T10552] IPVS: ftp: loaded support on port[0] = 21 [ 342.902550][T10550] chnl_net:caif_netlink_parms(): no params data found [ 342.949874][ T7] device bridge_slave_1 left promiscuous mode [ 342.956562][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.994612][ T7] device bridge_slave_0 left promiscuous mode [ 343.000769][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.055522][ T7] device bridge_slave_1 left promiscuous mode [ 343.062065][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.114790][ T7] device bridge_slave_0 left promiscuous mode [ 343.121087][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.165608][ T7] device bridge_slave_1 left promiscuous mode [ 343.171760][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.224596][ T7] device bridge_slave_0 left promiscuous mode [ 343.230751][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.664282][ T7] device hsr_slave_0 left promiscuous mode [ 348.713800][ T7] device hsr_slave_1 left promiscuous mode [ 348.761961][ T7] team0 (unregistering): Port device team_slave_1 removed [ 348.774043][ T7] team0 (unregistering): Port device team_slave_0 removed [ 348.788221][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.857543][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.949416][ T7] bond0 (unregistering): Released all slaves [ 349.104506][ T7] device hsr_slave_0 left promiscuous mode [ 349.163752][ T7] device hsr_slave_1 left promiscuous mode [ 349.225359][ T7] team0 (unregistering): Port device team_slave_1 removed [ 349.238283][ T7] team0 (unregistering): Port device team_slave_0 removed [ 349.249607][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.299868][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.384662][ T7] bond0 (unregistering): Released all slaves [ 349.524281][ T7] device hsr_slave_0 left promiscuous mode [ 349.563790][ T7] device hsr_slave_1 left promiscuous mode [ 349.612397][ T7] team0 (unregistering): Port device team_slave_1 removed [ 349.625706][ T7] team0 (unregistering): Port device team_slave_0 removed [ 349.637901][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.699667][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.790179][ T7] bond0 (unregistering): Released all slaves [ 349.939459][T10550] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.946958][T10550] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.955287][T10550] device bridge_slave_0 entered promiscuous mode [ 349.963320][T10550] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.971080][T10550] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.979171][T10550] device bridge_slave_1 entered promiscuous mode [ 350.003157][T10550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.015024][T10550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.049733][T10550] team0: Port device team_slave_0 added [ 350.063032][T10550] team0: Port device team_slave_1 added [ 350.113834][T10552] chnl_net:caif_netlink_parms(): no params data found [ 350.187170][T10550] device hsr_slave_0 entered promiscuous mode [ 350.224189][T10550] device hsr_slave_1 entered promiscuous mode [ 350.299966][T10552] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.307779][T10552] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.317068][T10552] device bridge_slave_0 entered promiscuous mode [ 350.333584][T10552] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.340658][T10552] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.348793][T10552] device bridge_slave_1 entered promiscuous mode [ 350.380019][T10552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.392045][T10552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.415274][T10552] team0: Port device team_slave_0 added [ 350.422671][T10552] team0: Port device team_slave_1 added [ 350.496442][T10552] device hsr_slave_0 entered promiscuous mode [ 350.553972][T10552] device hsr_slave_1 entered promiscuous mode [ 350.593774][T10552] debugfs: Directory 'hsr0' with parent '/' already present! [ 350.610281][T10550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.633301][T10552] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.640953][T10552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.648347][T10552] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.655910][T10552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.668795][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 350.682106][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.690916][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.703131][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.711568][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.722741][T10550] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.825034][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.837712][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.846914][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.854132][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.922583][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.932054][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.941167][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.950656][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.957795][ T8495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.980434][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.990254][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.000286][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.025078][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.039580][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.050152][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.066680][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.082135][T10550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.098929][T10552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.130109][T10550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.141791][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.151486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.171668][T10552] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.192065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.218187][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.244371][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.251445][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.271059][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.291216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.310030][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.317169][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.330792][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.340090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.379838][T10552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.393289][T10552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.425364][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.436257][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.451216][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.464515][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.473020][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.487981][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.498639][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.531672][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.560704][T10552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.592268][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.603289][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.956737][T10572] EXT4-fs (sda1): re-mounted. Opts: 12:50:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:36 executing program 5: mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x401, 0x8000) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) r3 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x6, 0x20000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x400, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f00000012c0)='/dev/radio#\x00', 0x0, 0x2) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001400)='/dev/dlm-monitor\x00', 0x0, 0x0) io_submit(r0, 0x3, &(0x7f0000001480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x10000, r1, &(0x7f0000000100)="2cd2ecfbdecc0e18ebef26e0d4a2ef0f7bef35d4f0cfce20aae6bef7731b01f7b334414518c6429d62ddb52557449602e2de8b3bd43c717a30a0821bd56316ead09cd670f98fe0a3756662600d19cd706d8311e22716e5504f9d146d6cb92a", 0x5f, 0x100000000, 0x0, 0x3, r2}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x5, 0x7, r3, &(0x7f0000000240)="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", 0x1000, 0x3, 0x0, 0x3, r4}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x10000, r6, &(0x7f0000001300)="91c08322119b6789a1506508855e07c3d7175512f5d7f748e945341ae24555a405f3029e6596bfb34240e97c459a8525bc50c01e72c49183052c378ca42e2c34d3c2266af1969bc6c247cb8cd795c80a39a828fc7cdd46ae4284403e680c6f8634f60d059f0ba6533ae81a64d8ae4efefe9c66f4596c7f40d6b16a1b0223b39f7c59c5bd41d91e9d3116e83b61802023d2792ba9f543eb87a2f1e705645204c5bbac0b2b31acbfc67325bf856a46548db19105755a7241b9a9a0859e62e8f57d76daa073ce89", 0xc6, 0x7, 0x0, 0x0, r7}]) 12:50:36 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:36 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:36 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 352.140438][ T26] audit: type=1800 audit(1563108636.616:112): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17053 res=0 12:50:36 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 352.353054][ T26] audit: type=1800 audit(1563108636.826:113): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17041 res=0 12:50:36 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:36 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xe, 0x7fff, 0x7, 0xf, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x7fffffff, 0x0, 0x0, 0x70bd26, 0x3503}, @sadb_lifetime={0x4, 0x3, 0x10000, 0xfffffffff43fd152, 0x9, 0x81}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x5, 0x14}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x78}}, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 12:50:36 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 352.575672][ T26] audit: type=1800 audit(1563108637.056:114): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17055 res=0 12:50:37 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 352.714108][ T26] audit: type=1800 audit(1563108637.196:115): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16705 res=0 12:50:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:37 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:37 executing program 5: fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() setregid(r0, r1) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 12:50:37 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 353.243906][ T26] audit: type=1800 audit(1563108637.726:116): pid=10614 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17058 res=0 [ 353.711954][T10619] IPVS: ftp: loaded support on port[0] = 21 [ 353.881808][T10619] chnl_net:caif_netlink_parms(): no params data found [ 353.971693][T10619] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.996988][T10619] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.013691][T10619] device bridge_slave_0 entered promiscuous mode [ 354.028045][T10619] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.035482][T10619] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.043811][T10619] device bridge_slave_1 entered promiscuous mode [ 354.071208][T10619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.083982][T10619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.107986][T10619] team0: Port device team_slave_0 added [ 354.116378][T10619] team0: Port device team_slave_1 added [ 354.177487][T10619] device hsr_slave_0 entered promiscuous mode [ 354.243989][T10619] device hsr_slave_1 entered promiscuous mode [ 354.283729][T10619] debugfs: Directory 'hsr0' with parent '/' already present! [ 354.335125][T10619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.350820][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 354.361765][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.369763][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.379627][T10619] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.391354][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.400696][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.409453][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.416564][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.434276][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.442175][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.451345][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.460217][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.467411][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.487807][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.496886][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.505540][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.518754][T10619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.530383][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.538651][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.548399][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.572933][T10619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.790475][T10627] EXT4-fs (sda1): re-mounted. Opts: 12:50:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:39 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x7, {0x7, 0x929, 0x1000, 0x495c12ca, 0x3, 0x7}}) 12:50:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:39 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) [ 354.920922][ T26] audit: type=1800 audit(1563108639.396:117): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16897 res=0 12:50:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:39 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x41, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8000, 0x400) linkat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x20000001400) [ 355.214476][ T26] audit: type=1800 audit(1563108639.696:118): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16913 res=0 12:50:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 355.467412][ T26] audit: type=1800 audit(1563108639.946:119): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16913 res=0 12:50:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 356.389773][T10663] IPVS: ftp: loaded support on port[0] = 21 [ 356.672011][T10665] IPVS: ftp: loaded support on port[0] = 21 [ 357.242701][T10663] chnl_net:caif_netlink_parms(): no params data found [ 357.531236][T10663] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.538584][T10663] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.546712][T10663] device bridge_slave_0 entered promiscuous mode [ 357.802136][T10663] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.810192][T10663] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.818296][T10663] device bridge_slave_1 entered promiscuous mode [ 357.853149][T10663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.898327][T10663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.174872][T10665] chnl_net:caif_netlink_parms(): no params data found [ 358.190006][T10663] team0: Port device team_slave_0 added [ 358.198998][T10663] team0: Port device team_slave_1 added [ 358.525606][T10663] device hsr_slave_0 entered promiscuous mode [ 358.563800][T10663] device hsr_slave_1 entered promiscuous mode [ 358.617505][T10663] debugfs: Directory 'hsr0' with parent '/' already present! [ 358.625492][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.632628][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.641099][T10665] device bridge_slave_0 entered promiscuous mode [ 358.649190][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.656541][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.664801][T10665] device bridge_slave_1 entered promiscuous mode [ 358.678650][ T7] device bridge_slave_1 left promiscuous mode [ 358.685417][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.724470][ T7] device bridge_slave_0 left promiscuous mode [ 358.730740][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.794940][ T7] device bridge_slave_1 left promiscuous mode [ 358.802809][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.855904][ T7] device bridge_slave_0 left promiscuous mode [ 358.862290][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.915524][ T7] device bridge_slave_1 left promiscuous mode [ 358.921739][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.974900][ T7] device bridge_slave_0 left promiscuous mode [ 358.981067][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.633972][ T7] device hsr_slave_0 left promiscuous mode [ 364.683719][ T7] device hsr_slave_1 left promiscuous mode [ 364.734505][ T7] team0 (unregistering): Port device team_slave_1 removed [ 364.746579][ T7] team0 (unregistering): Port device team_slave_0 removed [ 364.758521][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.798734][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.869384][ T7] bond0 (unregistering): Released all slaves [ 365.004444][ T7] device hsr_slave_0 left promiscuous mode [ 365.053742][ T7] device hsr_slave_1 left promiscuous mode [ 365.119474][ T7] team0 (unregistering): Port device team_slave_1 removed [ 365.131239][ T7] team0 (unregistering): Port device team_slave_0 removed [ 365.146592][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.209821][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.302019][ T7] bond0 (unregistering): Released all slaves [ 365.458661][ T7] device hsr_slave_0 left promiscuous mode [ 365.513708][ T7] device hsr_slave_1 left promiscuous mode [ 365.561916][ T7] team0 (unregistering): Port device team_slave_1 removed [ 365.575984][ T7] team0 (unregistering): Port device team_slave_0 removed [ 365.588530][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.639966][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.716757][ T7] bond0 (unregistering): Released all slaves [ 365.829285][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.840839][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.873321][T10665] team0: Port device team_slave_0 added [ 365.880726][T10665] team0: Port device team_slave_1 added [ 365.946625][T10665] device hsr_slave_0 entered promiscuous mode [ 365.983930][T10665] device hsr_slave_1 entered promiscuous mode [ 366.113325][T10663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.137365][T10663] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.154420][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.162219][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.210575][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.219378][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.231832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.238966][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.247108][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.257182][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.265829][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.272916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.386948][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.395615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 366.404428][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.412618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.438204][T10665] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.446608][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.474618][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.483642][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.492422][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.500814][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.515641][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.530105][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.540335][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.571464][T10663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.582794][T10663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.597058][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.607243][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.616327][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.623403][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.640801][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.649970][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.665239][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.672331][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.686835][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.699176][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.709792][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.718624][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.744183][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.754365][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.762099][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.771926][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.782267][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.801924][T10665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.813501][T10665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.831034][T10663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.841502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.851433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.874722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.886577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.906461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.918108][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.187525][T10678] EXT4-fs (sda1): re-mounted. Opts: 12:50:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:51 executing program 5: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 12:50:51 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 367.439791][ T26] audit: type=1800 audit(1563108651.916:120): pid=10693 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17072 res=0 12:50:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:52 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:52 executing program 5: mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/115) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 12:50:52 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:52 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) move_pages(r0, 0x3, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f00000000c0)=[0x4, 0x3ff, 0x8510, 0x400, 0x2, 0x7, 0xd43f, 0x4, 0xfff, 0x52], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x6) [ 367.710336][ T26] audit: type=1800 audit(1563108652.186:121): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16486 res=0 12:50:52 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:52 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 368.026702][ T26] audit: type=1800 audit(1563108652.506:122): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17060 res=0 12:50:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:53 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 12:50:53 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:53 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 368.689404][ T26] audit: type=1800 audit(1563108653.166:123): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16657 res=0 [ 369.121051][T10730] IPVS: ftp: loaded support on port[0] = 21 [ 369.259764][T10730] chnl_net:caif_netlink_parms(): no params data found [ 369.326061][T10730] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.333906][T10730] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.342664][T10730] device bridge_slave_0 entered promiscuous mode [ 369.352448][T10730] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.360015][T10730] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.369328][T10730] device bridge_slave_1 entered promiscuous mode [ 369.405021][T10730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.417870][T10730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.451578][T10730] team0: Port device team_slave_0 added [ 369.460335][T10730] team0: Port device team_slave_1 added [ 369.526963][T10730] device hsr_slave_0 entered promiscuous mode [ 369.564325][T10730] device hsr_slave_1 entered promiscuous mode [ 369.623673][T10730] debugfs: Directory 'hsr0' with parent '/' already present! [ 369.679818][T10730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.698837][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.708456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.718939][T10730] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.728974][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.737790][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.746806][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.753921][ T8495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.762745][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.777714][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.786829][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.795451][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.802501][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.820970][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.830073][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.839097][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.854629][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.871825][T10730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.882978][T10730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.902670][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.912365][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.927512][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.936424][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.944915][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.953145][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.961688][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.973086][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.991364][T10730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.229310][T10738] EXT4-fs (sda1): re-mounted. Opts: 12:50:54 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:50:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:54 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:54 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x280, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x101100) r2 = semget(0x2, 0x0, 0x80) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f0000000140)=""/232) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c4e1f9132b0f20d835080000000f22d8c7442400705749e8c744240200000000c7442406000000000f011c24b8010000000f01c1c4e37960a20c9c00005a660fc7b7005800000f01df0f01ca0f01efc744240081a455f0c744240200000000c7442406000000000f011424", 0x6b}], 0x1, 0x14, &(0x7f0000000140), 0x0) 12:50:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:50:54 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 370.384801][T10746] Unknown ioctl 1075883590 [ 370.392652][T10746] Unknown ioctl 1075883590 [ 370.404286][ T26] audit: type=1800 audit(1563108654.886:124): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16833 res=0 [ 370.412608][T10746] Unknown ioctl 1075883590 12:50:54 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 370.475471][T10746] Unknown ioctl 1075883590 [ 370.488720][T10746] Unknown ioctl 1075883590 [ 370.524379][T10746] Unknown ioctl 1075883590 12:50:55 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 370.579696][T10746] Unknown ioctl 1075883590 [ 370.623683][ T26] audit: type=1800 audit(1563108655.096:125): pid=10755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16488 res=0 [ 370.626355][T10746] Unknown ioctl 1075883590 [ 370.664367][T10746] Unknown ioctl 1075883590 [ 370.684717][T10746] Unknown ioctl 1075883590 12:50:55 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:55 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 370.717350][T10746] Unknown ioctl 1075883590 [ 370.744653][T10746] Unknown ioctl 1075883590 [ 370.793919][T10746] Unknown ioctl 1075883590 [ 370.803775][T10746] Unknown ioctl 1075883590 12:50:55 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 370.843993][T10746] Unknown ioctl 1075883590 [ 370.849438][ T26] audit: type=1800 audit(1563108655.326:126): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16929 res=0 [ 370.854361][T10746] Unknown ioctl 1075883590 12:50:55 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 370.949350][T10746] Unknown ioctl 1075883590 [ 370.974470][T10746] Unknown ioctl 1075883590 [ 370.996032][T10746] Unknown ioctl 1075883590 [ 371.013833][T10746] Unknown ioctl 1075883590 [ 371.018495][T10746] Unknown ioctl 1075883590 [ 371.021375][ T26] audit: type=1800 audit(1563108655.496:127): pid=10769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16488 res=0 [ 371.043878][T10746] Unknown ioctl 1075883590 [ 371.049687][T10746] Unknown ioctl 1075883590 [ 371.063122][T10746] Unknown ioctl 1075883590 [ 371.074317][T10746] Unknown ioctl 1075883590 12:50:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:50:56 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:50:56 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 371.651824][ T26] audit: type=1800 audit(1563108656.126:128): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17041 res=0 [ 372.010236][T10781] IPVS: ftp: loaded support on port[0] = 21 [ 372.302481][T10783] IPVS: ftp: loaded support on port[0] = 21 [ 372.867554][T10781] chnl_net:caif_netlink_parms(): no params data found [ 373.209303][T10783] chnl_net:caif_netlink_parms(): no params data found [ 373.218295][T10781] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.226000][T10781] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.234069][T10781] device bridge_slave_0 entered promiscuous mode [ 373.547216][T10781] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.557538][T10781] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.565493][T10781] device bridge_slave_1 entered promiscuous mode [ 373.861187][T10781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.874840][T10781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.913066][T10781] team0: Port device team_slave_0 added [ 373.919420][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.926899][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.935417][T10783] device bridge_slave_0 entered promiscuous mode [ 374.179016][T10781] team0: Port device team_slave_1 added [ 374.185754][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.192819][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.201989][T10783] device bridge_slave_1 entered promiscuous mode [ 374.222983][T10783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.239067][ T7] device bridge_slave_1 left promiscuous mode [ 374.245584][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.294727][ T7] device bridge_slave_0 left promiscuous mode [ 374.300948][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.355598][ T7] device bridge_slave_1 left promiscuous mode [ 374.361819][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.414625][ T7] device bridge_slave_0 left promiscuous mode [ 374.420855][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.455698][ T7] device bridge_slave_1 left promiscuous mode [ 374.461916][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.504837][ T7] device bridge_slave_0 left promiscuous mode [ 374.511194][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.154491][ T7] device hsr_slave_0 left promiscuous mode [ 380.193825][ T7] device hsr_slave_1 left promiscuous mode [ 380.244683][ T7] team0 (unregistering): Port device team_slave_1 removed [ 380.257670][ T7] team0 (unregistering): Port device team_slave_0 removed [ 380.269151][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.319694][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.409772][ T7] bond0 (unregistering): Released all slaves [ 380.624047][ T7] device hsr_slave_0 left promiscuous mode [ 380.673776][ T7] device hsr_slave_1 left promiscuous mode [ 380.725539][ T7] team0 (unregistering): Port device team_slave_1 removed [ 380.737776][ T7] team0 (unregistering): Port device team_slave_0 removed [ 380.748917][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.797227][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.880879][ T7] bond0 (unregistering): Released all slaves [ 381.024321][ T7] device hsr_slave_0 left promiscuous mode [ 381.063829][ T7] device hsr_slave_1 left promiscuous mode [ 381.111691][ T7] team0 (unregistering): Port device team_slave_1 removed [ 381.126098][ T7] team0 (unregistering): Port device team_slave_0 removed [ 381.139117][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.189211][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.296310][ T7] bond0 (unregistering): Released all slaves [ 381.419121][T10783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.476533][T10781] device hsr_slave_0 entered promiscuous mode [ 381.544144][T10781] device hsr_slave_1 entered promiscuous mode [ 381.605362][T10783] team0: Port device team_slave_0 added [ 381.614562][T10783] team0: Port device team_slave_1 added [ 381.666432][T10783] device hsr_slave_0 entered promiscuous mode [ 381.703994][T10783] device hsr_slave_1 entered promiscuous mode [ 381.753685][T10783] debugfs: Directory 'hsr0' with parent '/' already present! [ 381.860523][T10781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.880297][T10783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.893476][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.901649][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.912632][T10781] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.024169][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.032635][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.040734][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.049468][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.058470][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.065603][ T8587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.076877][T10783] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.125221][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.150024][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.158821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.167409][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.174517][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.182239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.191811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.200485][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.207601][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.215510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.224773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.233381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.241955][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.249066][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.274224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.283031][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.292027][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.326050][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.335664][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.346028][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 382.355617][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.364973][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.380902][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.404066][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.412245][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.421944][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.431061][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 382.449246][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 382.462770][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.481127][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.490014][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.499342][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.549996][T10783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.564779][T10781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.943921][T10799] EXT4-fs (sda1): re-mounted. Opts: 12:51:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:07 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) getsockname(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KIOCSOUND(r1, 0x4b2f, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={{0x7, 0xfffffffffffffeff, 0x86, 0x3, 0x9, 0xed01}, 0x5}) 12:51:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:51:07 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:07 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 383.196346][ T26] audit: type=1800 audit(1563108667.676:129): pid=10812 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16689 res=0 12:51:07 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:07 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:07 executing program 5: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xa6, 0x103202) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000240)=@gcm_256={{0x307}, "238c42c7e8f5b290", "cbb386104690050122139fe3e802539f4df9ddab834d6c2c3330c40183fbdd26", "a2672393", "43547e5ce9699850"}, 0x38) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000001c0)={0xc, 0x79, {0x0, 0x80000001, 0x9, {0x101}, {0x5, 0xfffffffffffffffd}, @period={0x5b, 0x2, 0x2e4f, 0x8000, 0xabf, {0x9, 0x3, 0x0, 0x5}, 0x9, &(0x7f0000000140)=[0x2, 0x9ce, 0x100000001, 0x9, 0x7fffffff, 0x2, 0x9c55, 0x172e, 0x9]}}, {0x57, 0x0, 0x9, {0x4, 0xfffffffffffffff8}, {0xffffffff, 0x49d3}, @period={0x5a, 0x7, 0x80000001, 0x7ff, 0x73, {0x8, 0x3, 0x8, 0x81}, 0x7, &(0x7f0000000180)=[0x0, 0x4, 0x200, 0x5, 0x0, 0x9, 0x2]}}}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr="9b9018097519d8dc2dd448151c206df0", 0x8, 0x2, 0x0, 0x2, 0xd55, 0x3}, 0x20) [ 383.404080][ T26] audit: type=1800 audit(1563108667.886:130): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16689 res=0 12:51:08 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:08 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:08 executing program 5: [ 383.719629][ T26] audit: type=1800 audit(1563108668.196:131): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17093 res=0 12:51:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:08 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:08 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 384.324889][ T26] audit: type=1800 audit(1563108668.806:132): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17093 res=0 [ 384.743245][T10845] IPVS: ftp: loaded support on port[0] = 21 [ 384.849567][T10845] chnl_net:caif_netlink_parms(): no params data found [ 384.903482][T10845] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.919923][T10845] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.931552][T10845] device bridge_slave_0 entered promiscuous mode [ 384.948572][T10845] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.961580][T10845] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.973371][T10845] device bridge_slave_1 entered promiscuous mode [ 385.021464][T10845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.041854][T10845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.087774][T10845] team0: Port device team_slave_0 added [ 385.100690][T10845] team0: Port device team_slave_1 added [ 385.177157][T10845] device hsr_slave_0 entered promiscuous mode [ 385.214016][T10845] device hsr_slave_1 entered promiscuous mode [ 385.273611][T10845] debugfs: Directory 'hsr0' with parent '/' already present! [ 385.331824][T10845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.343084][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.351409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.362174][T10845] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.372597][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.381286][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.390963][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.398095][ T8852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.407729][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.443609][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.452369][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.461079][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.468210][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.486099][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.501010][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.511057][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 385.526833][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.536721][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.552831][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.561962][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.578617][T10845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.589634][T10845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.605326][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.617341][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.627807][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.636756][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.657317][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.674862][T10845] 8021q: adding VLAN 0 to HW filter on device batadv0 12:51:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:51:10 executing program 5: 12:51:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:10 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 385.862282][T10853] EXT4-fs (sda1): re-mounted. Opts: 12:51:10 executing program 5: 12:51:10 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 386.014211][ T26] audit: type=1800 audit(1563108670.496:133): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16945 res=0 12:51:10 executing program 5: 12:51:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:10 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 386.293053][ T26] audit: type=1800 audit(1563108670.766:134): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17087 res=0 12:51:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 386.524781][ T26] audit: type=1800 audit(1563108671.006:135): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17090 res=0 12:51:11 executing program 5: 12:51:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 387.434503][T10883] IPVS: ftp: loaded support on port[0] = 21 [ 387.995075][T10887] IPVS: ftp: loaded support on port[0] = 21 [ 388.316114][T10883] chnl_net:caif_netlink_parms(): no params data found [ 388.636483][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.647760][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.656244][T10883] device bridge_slave_0 entered promiscuous mode [ 388.927677][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.934873][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.942504][T10883] device bridge_slave_1 entered promiscuous mode [ 389.255204][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.268532][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.537723][T10887] chnl_net:caif_netlink_parms(): no params data found [ 389.549252][T10883] team0: Port device team_slave_0 added [ 389.567467][T10883] team0: Port device team_slave_1 added [ 389.576028][ T7] device bridge_slave_1 left promiscuous mode [ 389.582262][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.615663][ T7] device bridge_slave_0 left promiscuous mode [ 389.621889][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.675544][ T7] device bridge_slave_1 left promiscuous mode [ 389.681766][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.724457][ T7] device bridge_slave_0 left promiscuous mode [ 389.730658][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.785782][ T7] device bridge_slave_1 left promiscuous mode [ 389.792022][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.834388][ T7] device bridge_slave_0 left promiscuous mode [ 389.840550][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.464210][ T7] device hsr_slave_0 left promiscuous mode [ 395.504604][ T7] device hsr_slave_1 left promiscuous mode [ 395.555513][ T7] team0 (unregistering): Port device team_slave_1 removed [ 395.572525][ T7] team0 (unregistering): Port device team_slave_0 removed [ 395.585087][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.658294][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.750658][ T7] bond0 (unregistering): Released all slaves [ 395.884628][ T7] device hsr_slave_0 left promiscuous mode [ 395.923932][ T7] device hsr_slave_1 left promiscuous mode [ 395.981402][ T7] team0 (unregistering): Port device team_slave_1 removed [ 395.995389][ T7] team0 (unregistering): Port device team_slave_0 removed [ 396.011449][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.058702][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.152069][ T7] bond0 (unregistering): Released all slaves [ 396.294440][ T7] device hsr_slave_0 left promiscuous mode [ 396.333849][ T7] device hsr_slave_1 left promiscuous mode [ 396.383232][ T7] team0 (unregistering): Port device team_slave_1 removed [ 396.396189][ T7] team0 (unregistering): Port device team_slave_0 removed [ 396.409641][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.459189][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.555723][ T7] bond0 (unregistering): Released all slaves [ 396.738110][T10883] device hsr_slave_0 entered promiscuous mode [ 396.814080][T10883] device hsr_slave_1 entered promiscuous mode [ 396.854028][T10887] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.861364][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.870009][T10887] device bridge_slave_0 entered promiscuous mode [ 396.878113][T10887] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.885272][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.893252][T10887] device bridge_slave_1 entered promiscuous mode [ 396.915017][T10887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.927847][T10887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.966359][T10887] team0: Port device team_slave_0 added [ 396.975553][T10887] team0: Port device team_slave_1 added [ 397.037080][T10887] device hsr_slave_0 entered promiscuous mode [ 397.074017][T10887] device hsr_slave_1 entered promiscuous mode [ 397.113771][T10887] debugfs: Directory 'hsr0' with parent '/' already present! [ 397.149162][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.164977][T10887] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.172200][T10887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.188385][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.199858][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.208213][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.218403][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.241650][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.250934][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.260265][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.267689][ T8587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.285999][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.295827][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.305001][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.314187][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.321241][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.329610][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.338680][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.361436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.370659][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.380324][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.389757][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.398902][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.455637][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.467237][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.574763][T10883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.597774][T10887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.622717][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.652505][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 397.672253][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.680930][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.703422][T10887] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.725569][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.738821][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.750709][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.757855][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.776147][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.792182][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.822216][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.829646][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.861894][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.872988][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.918242][T10887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.937505][T10887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.008501][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.023267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.041686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.051371][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.066989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.079339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.091331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.107073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.119498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.131348][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.166446][T10887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.485814][T10908] EXT4-fs (sda1): re-mounted. Opts: 12:51:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:23 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:23 executing program 5: 12:51:23 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:51:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:23 executing program 5: [ 398.616272][ T26] audit: type=1800 audit(1563108683.096:136): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16657 res=0 12:51:23 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:23 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:23 executing program 5: [ 398.873436][ T26] audit: type=1800 audit(1563108683.346:137): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 12:51:23 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:23 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 399.123790][ T26] audit: type=1800 audit(1563108683.606:138): pid=10935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 12:51:24 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:24 executing program 5: 12:51:24 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 399.766725][ T26] audit: type=1800 audit(1563108684.246:139): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16535 res=0 [ 400.139162][T10948] IPVS: ftp: loaded support on port[0] = 21 [ 400.257710][T10948] chnl_net:caif_netlink_parms(): no params data found [ 400.312736][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.324205][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.333268][T10948] device bridge_slave_0 entered promiscuous mode [ 400.343741][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.351625][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.360826][T10948] device bridge_slave_1 entered promiscuous mode [ 400.402881][T10948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.428334][T10948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.495664][T10948] team0: Port device team_slave_0 added [ 400.516282][T10948] team0: Port device team_slave_1 added [ 400.616787][T10948] device hsr_slave_0 entered promiscuous mode [ 400.684145][T10948] device hsr_slave_1 entered promiscuous mode [ 400.723722][T10948] debugfs: Directory 'hsr0' with parent '/' already present! [ 400.774764][T10948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.790994][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 400.801983][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.812381][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.823755][T10948] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.835630][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.844754][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.853286][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.860713][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.876198][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 400.894250][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 400.903126][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.934110][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.941233][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.964054][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 400.986712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 400.996004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 401.005532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 401.015171][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 401.024003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 401.036301][T10948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.057887][T10948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 401.073210][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.090826][T10948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.272473][T10956] EXT4-fs (sda1): re-mounted. Opts: 12:51:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:51:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:25 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:25 executing program 5: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_mount_image$gfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0) 12:51:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 401.449845][ T26] audit: type=1800 audit(1563108685.926:140): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16545 res=0 12:51:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) 12:51:26 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:26 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 401.679137][ T26] audit: type=1800 audit(1563108686.156:141): pid=10978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16545 res=0 12:51:26 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:26 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x105083) [ 401.844390][ T26] audit: type=1800 audit(1563108686.326:142): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16537 res=0 12:51:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 403.136602][T10992] IPVS: ftp: loaded support on port[0] = 21 [ 403.438697][T10994] IPVS: ftp: loaded support on port[0] = 21 [ 404.022627][T10992] chnl_net:caif_netlink_parms(): no params data found [ 404.326749][T10992] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.334832][T10992] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.343219][T10992] device bridge_slave_0 entered promiscuous mode [ 404.362275][T10992] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.369810][T10992] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.377805][T10992] device bridge_slave_1 entered promiscuous mode [ 404.663465][T10994] chnl_net:caif_netlink_parms(): no params data found [ 404.679332][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.692737][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.739772][T10992] team0: Port device team_slave_0 added [ 405.012469][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.020039][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.029284][T10994] device bridge_slave_0 entered promiscuous mode [ 405.041914][T10992] team0: Port device team_slave_1 added [ 405.106389][T10992] device hsr_slave_0 entered promiscuous mode [ 405.133921][T10992] device hsr_slave_1 entered promiscuous mode [ 405.173630][T10992] debugfs: Directory 'hsr0' with parent '/' already present! [ 405.181812][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.190360][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.198599][T10994] device bridge_slave_1 entered promiscuous mode [ 405.206590][ T7] device bridge_slave_1 left promiscuous mode [ 405.213341][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.255792][ T7] device bridge_slave_0 left promiscuous mode [ 405.262375][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.315660][ T7] device bridge_slave_1 left promiscuous mode [ 405.322237][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.384578][ T7] device bridge_slave_0 left promiscuous mode [ 405.391088][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.435391][ T7] device bridge_slave_1 left promiscuous mode [ 405.441670][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.494567][ T7] device bridge_slave_0 left promiscuous mode [ 405.500736][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.194168][ T7] device hsr_slave_0 left promiscuous mode [ 411.233749][ T7] device hsr_slave_1 left promiscuous mode [ 411.286709][ T7] team0 (unregistering): Port device team_slave_1 removed [ 411.298464][ T7] team0 (unregistering): Port device team_slave_0 removed [ 411.310965][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.378383][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.466395][ T7] bond0 (unregistering): Released all slaves [ 411.594103][ T7] device hsr_slave_0 left promiscuous mode [ 411.643821][ T7] device hsr_slave_1 left promiscuous mode [ 411.715246][ T7] team0 (unregistering): Port device team_slave_1 removed [ 411.727229][ T7] team0 (unregistering): Port device team_slave_0 removed [ 411.738054][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.789409][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.861761][ T7] bond0 (unregistering): Released all slaves [ 411.974579][ T7] device hsr_slave_0 left promiscuous mode [ 412.013794][ T7] device hsr_slave_1 left promiscuous mode [ 412.064993][ T7] team0 (unregistering): Port device team_slave_1 removed [ 412.077493][ T7] team0 (unregistering): Port device team_slave_0 removed [ 412.088969][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.137171][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.242180][ T7] bond0 (unregistering): Released all slaves [ 412.375043][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.386319][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.420302][T10994] team0: Port device team_slave_0 added [ 412.428911][T10994] team0: Port device team_slave_1 added [ 412.487276][T10994] device hsr_slave_0 entered promiscuous mode [ 412.533946][T10994] device hsr_slave_1 entered promiscuous mode [ 412.644214][T10992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.662352][T10992] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.672971][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 412.681892][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.703167][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.712436][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.721532][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.728648][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.740516][T10994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.751433][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 412.759643][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.767745][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.777217][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.785978][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.793018][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.809345][T10994] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.823916][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 412.831848][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.839997][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.848997][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.871795][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.881752][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 412.890792][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.899588][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.908259][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.915385][ T8587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.923113][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.931947][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.940523][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.947645][ T8587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.955539][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.964605][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.972520][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.983880][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 412.992484][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 413.054582][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 413.066331][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 413.081298][T10992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.092420][T10992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.209836][T10994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.220920][T10994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.241269][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 413.255166][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 413.264009][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 413.272610][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 413.281202][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 413.297065][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 413.309347][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 413.342543][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 413.351033][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 413.372612][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.390538][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.661313][T11007] EXT4-fs (sda1): re-mounted. Opts: 12:51:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:38 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:38 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:51:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 413.996265][ T26] audit: type=1800 audit(1563108698.476:143): pid=11023 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16515 res=0 12:51:38 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:38 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 414.214170][ T26] audit: type=1800 audit(1563108698.696:144): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16518 res=0 [ 414.250326][T11022] EXT4-fs (sda1): re-mounted. Opts: 12:51:38 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:38 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 414.417868][ T26] audit: type=1800 audit(1563108698.896:145): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16518 res=0 12:51:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:39 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 414.614765][ T26] audit: type=1800 audit(1563108699.086:146): pid=11044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16518 res=0 12:51:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 415.453969][ T26] audit: type=1800 audit(1563108699.926:147): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16520 res=0 [ 415.688211][T11054] IPVS: ftp: loaded support on port[0] = 21 [ 415.791593][T11054] chnl_net:caif_netlink_parms(): no params data found [ 415.842177][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.849439][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.864336][T11054] device bridge_slave_0 entered promiscuous mode [ 415.880547][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.887769][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.902557][T11054] device bridge_slave_1 entered promiscuous mode [ 415.945459][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.963466][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.001915][T11054] team0: Port device team_slave_0 added [ 416.009518][T11054] team0: Port device team_slave_1 added [ 416.086375][T11054] device hsr_slave_0 entered promiscuous mode [ 416.123974][T11054] device hsr_slave_1 entered promiscuous mode [ 416.164470][T11054] debugfs: Directory 'hsr0' with parent '/' already present! [ 416.279340][T11054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.315651][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 416.335387][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.343393][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.362323][T11054] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.376292][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.385530][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.394946][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.402009][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.410140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.426074][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 416.435409][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.444202][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.451287][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.472716][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.481327][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.491590][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.500189][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.512543][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.523064][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.547005][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.780922][T11062] EXT4-fs (sda1): re-mounted. Opts: 12:51:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:51:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:41 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 416.882151][ T26] audit: type=1800 audit(1563108701.356:148): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16487 res=0 12:51:41 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 417.032323][ T26] audit: type=1800 audit(1563108701.506:149): pid=11075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16546 res=0 12:51:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:41 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 417.209973][ T26] audit: type=1800 audit(1563108701.686:150): pid=11082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16550 res=0 12:51:41 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 417.343437][ T26] audit: type=1800 audit(1563108701.816:151): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16511 res=0 [ 418.735322][T11093] IPVS: ftp: loaded support on port[0] = 21 [ 418.744789][T11096] IPVS: ftp: loaded support on port[0] = 21 [ 418.756963][T11097] IPVS: ftp: loaded support on port[0] = 21 [ 420.245154][T11093] chnl_net:caif_netlink_parms(): no params data found [ 420.259600][T11097] chnl_net:caif_netlink_parms(): no params data found [ 420.601563][T11096] chnl_net:caif_netlink_parms(): no params data found [ 421.032369][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.039942][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.049037][T11093] device bridge_slave_0 entered promiscuous mode [ 421.067283][T11097] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.075278][T11097] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.084185][T11097] device bridge_slave_0 entered promiscuous mode [ 421.092240][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.101241][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.109738][T11093] device bridge_slave_1 entered promiscuous mode [ 421.117101][T11096] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.127099][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.136126][T11096] device bridge_slave_0 entered promiscuous mode [ 421.487206][T11097] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.494641][T11097] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.502418][T11097] device bridge_slave_1 entered promiscuous mode [ 421.515729][T11096] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.522805][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.531208][T11096] device bridge_slave_1 entered promiscuous mode [ 421.575988][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.587730][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.609723][T11097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.621026][T11097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.637330][T11096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.662694][ T7] device bridge_slave_1 left promiscuous mode [ 421.669181][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.724554][ T7] device bridge_slave_0 left promiscuous mode [ 421.730805][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.785447][ T7] device bridge_slave_1 left promiscuous mode [ 421.791659][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.844906][ T7] device bridge_slave_0 left promiscuous mode [ 421.851119][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.915088][ T7] device bridge_slave_1 left promiscuous mode [ 421.921471][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.964813][ T7] device bridge_slave_0 left promiscuous mode [ 421.971095][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.016014][ T7] device bridge_slave_1 left promiscuous mode [ 422.022175][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.054810][ T7] device bridge_slave_0 left promiscuous mode [ 422.061144][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.824220][ T7] device hsr_slave_0 left promiscuous mode [ 429.863782][ T7] device hsr_slave_1 left promiscuous mode [ 429.940489][ T7] team0 (unregistering): Port device team_slave_1 removed [ 429.954023][ T7] team0 (unregistering): Port device team_slave_0 removed [ 429.966071][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.029338][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.126429][ T7] bond0 (unregistering): Released all slaves [ 430.284675][ T7] device hsr_slave_0 left promiscuous mode [ 430.323914][ T7] device hsr_slave_1 left promiscuous mode [ 430.374785][ T7] team0 (unregistering): Port device team_slave_1 removed [ 430.386672][ T7] team0 (unregistering): Port device team_slave_0 removed [ 430.397614][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.467742][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.549718][ T7] bond0 (unregistering): Released all slaves [ 430.664450][ T7] device hsr_slave_0 left promiscuous mode [ 430.703995][ T7] device hsr_slave_1 left promiscuous mode [ 430.752987][ T7] team0 (unregistering): Port device team_slave_1 removed [ 430.767214][ T7] team0 (unregistering): Port device team_slave_0 removed [ 430.780226][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.827940][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.912473][ T7] bond0 (unregistering): Released all slaves [ 431.054407][ T7] device hsr_slave_0 left promiscuous mode [ 431.103942][ T7] device hsr_slave_1 left promiscuous mode [ 431.161809][ T7] team0 (unregistering): Port device team_slave_1 removed [ 431.176301][ T7] team0 (unregistering): Port device team_slave_0 removed [ 431.189052][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.239516][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.327985][ T7] bond0 (unregistering): Released all slaves [ 431.418974][T11096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.429451][T11093] team0: Port device team_slave_0 added [ 431.452420][T11093] team0: Port device team_slave_1 added [ 431.459525][T11097] team0: Port device team_slave_0 added [ 431.471709][T11096] team0: Port device team_slave_0 added [ 431.487487][T11097] team0: Port device team_slave_1 added [ 431.495663][T11096] team0: Port device team_slave_1 added [ 431.566330][T11097] device hsr_slave_0 entered promiscuous mode [ 431.593978][T11097] device hsr_slave_1 entered promiscuous mode [ 431.676485][T11093] device hsr_slave_0 entered promiscuous mode [ 431.713979][T11093] device hsr_slave_1 entered promiscuous mode [ 431.763592][T11093] debugfs: Directory 'hsr0' with parent '/' already present! [ 431.836443][T11096] device hsr_slave_0 entered promiscuous mode [ 431.873952][T11096] device hsr_slave_1 entered promiscuous mode [ 431.923664][T11096] debugfs: Directory 'hsr0' with parent '/' already present! [ 432.006041][T11093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.037710][T11097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.049488][T11093] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.065005][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.072895][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.104967][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.114162][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.123982][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.131056][ T8588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.138816][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.147838][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.156443][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.163564][ T8588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.171230][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 432.180067][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 432.190596][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.218655][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 432.229335][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 432.238474][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 432.247069][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 432.255580][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.264098][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 432.276024][T11096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.290159][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.299782][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.310750][T11097] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.327881][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.339392][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.347551][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.358594][T11093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.375320][T11096] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.382651][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.391661][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.400353][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.407477][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.415322][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.438206][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.447320][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.456650][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.463775][ T8588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.472181][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.480975][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.489434][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.496545][ T8588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.504996][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.520220][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.628444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 432.638363][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 432.647049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 432.656430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 432.665143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.673772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.682186][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.689286][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.697984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 432.707321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 432.812110][T11096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.823490][T11096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.837336][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 432.847258][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 432.856504][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 432.898990][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 432.915411][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 432.930069][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 432.938873][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.962233][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.982469][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.042233][T11097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.053393][T11107] EXT4-fs (sda1): re-mounted. Opts: [ 433.061246][T11097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.093985][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.139425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.156578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.187467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.202630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.217517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.229102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.242615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.265615][T11096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.642912][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.660465][T11097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.903897][T11126] EXT4-fs (sda1): re-mounted. Opts: 12:51:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) 12:51:58 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:58 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:51:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:51:58 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 434.160115][ T26] audit: type=1800 audit(1563108718.636:152): pid=11138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16545 res=0 12:51:58 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:51:58 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 434.375513][ T26] audit: type=1800 audit(1563108718.856:153): pid=11144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16556 res=0 12:51:58 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:58 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 434.544324][ T26] audit: type=1800 audit(1563108719.026:154): pid=11148 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16591 res=0 12:51:59 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:59 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 434.711757][ T26] audit: type=1800 audit(1563108719.186:155): pid=11153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16591 res=0 12:51:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) 12:51:59 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:51:59 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 435.304416][ T26] audit: type=1800 audit(1563108719.786:156): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16597 res=0 [ 435.763006][T11166] IPVS: ftp: loaded support on port[0] = 21 [ 435.922430][T11166] chnl_net:caif_netlink_parms(): no params data found [ 436.004992][T11166] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.012488][T11166] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.046152][T11166] device bridge_slave_0 entered promiscuous mode [ 436.068754][T11166] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.088028][T11166] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.111112][T11166] device bridge_slave_1 entered promiscuous mode [ 436.163422][T11166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.184506][T11166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.208411][T11169] IPVS: ftp: loaded support on port[0] = 21 [ 436.263410][T11166] team0: Port device team_slave_0 added [ 436.294676][T11166] team0: Port device team_slave_1 added [ 436.405891][T11166] device hsr_slave_0 entered promiscuous mode [ 436.443930][T11166] device hsr_slave_1 entered promiscuous mode [ 436.483687][T11166] debugfs: Directory 'hsr0' with parent '/' already present! [ 436.598563][T11169] chnl_net:caif_netlink_parms(): no params data found [ 436.650442][T11169] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.657901][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.668098][T11169] device bridge_slave_0 entered promiscuous mode [ 436.676468][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.683697][T11169] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.691900][T11169] device bridge_slave_1 entered promiscuous mode [ 436.722747][T11169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.739004][T11169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.769085][T11169] team0: Port device team_slave_0 added [ 436.777606][T11169] team0: Port device team_slave_1 added [ 436.802409][T11166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.824826][T11166] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.849485][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.864256][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.927574][T11169] device hsr_slave_0 entered promiscuous mode [ 436.993846][T11169] device hsr_slave_1 entered promiscuous mode [ 437.033638][T11169] debugfs: Directory 'hsr0' with parent '/' already present! [ 437.043660][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.052212][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.061088][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.068216][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.076301][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.090318][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.099098][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.107711][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.114821][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.133758][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.144287][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.152808][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.162838][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.189379][T11166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 437.200527][T11166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.212547][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.221312][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.230052][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.239241][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.248936][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.258635][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.280688][T11166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.354698][T11169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.375007][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.393327][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.407819][T11169] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.426539][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.437078][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.445653][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.452713][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.504720][T11178] EXT4-fs (sda1): re-mounted. Opts: [ 438.245946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 438.255011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 438.265391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 438.274333][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.281395][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.289153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 438.298001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 438.778960][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.793032][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.803027][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 438.835988][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 438.845367][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 438.855238][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 438.865992][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.185315][T11169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.197930][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 439.207780][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 439.219295][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.534450][T11169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.013270][T11190] EXT4-fs (sda1): re-mounted. Opts: 12:52:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:52:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) 12:52:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 440.172626][ T26] audit: type=1800 audit(1563108724.646:157): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16590 res=0 12:52:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 440.350766][ T26] audit: type=1800 audit(1563108724.826:158): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16577 res=0 12:52:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 440.550214][ T26] audit: type=1800 audit(1563108725.026:159): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16620 res=0 12:52:05 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 440.732566][ T26] audit: type=1800 audit(1563108725.206:160): pid=11217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16618 res=0 12:52:05 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 441.747719][T11223] IPVS: ftp: loaded support on port[0] = 21 [ 442.140572][T11226] IPVS: ftp: loaded support on port[0] = 21 [ 442.159792][T11227] IPVS: ftp: loaded support on port[0] = 21 [ 442.202192][ T7] device bridge_slave_1 left promiscuous mode [ 442.209910][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.254283][ T7] device bridge_slave_0 left promiscuous mode [ 442.260600][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.315070][ T7] device bridge_slave_1 left promiscuous mode [ 442.321267][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.384812][ T7] device bridge_slave_0 left promiscuous mode [ 442.391004][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.435199][ T7] device bridge_slave_1 left promiscuous mode [ 442.441525][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.484734][ T7] device bridge_slave_0 left promiscuous mode [ 442.491002][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.545817][ T7] device bridge_slave_1 left promiscuous mode [ 442.552028][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.604811][ T7] device bridge_slave_0 left promiscuous mode [ 442.611032][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.764110][ T7] device hsr_slave_0 left promiscuous mode [ 449.813820][ T7] device hsr_slave_1 left promiscuous mode [ 449.890449][ T7] team0 (unregistering): Port device team_slave_1 removed [ 449.905295][ T7] team0 (unregistering): Port device team_slave_0 removed [ 449.919362][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.959394][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.029273][ T7] bond0 (unregistering): Released all slaves [ 450.175285][ T7] device hsr_slave_0 left promiscuous mode [ 450.213691][ T7] device hsr_slave_1 left promiscuous mode [ 450.263475][ T7] team0 (unregistering): Port device team_slave_1 removed [ 450.278743][ T7] team0 (unregistering): Port device team_slave_0 removed [ 450.290351][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.339127][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.420355][ T7] bond0 (unregistering): Released all slaves [ 450.544874][ T7] device hsr_slave_0 left promiscuous mode [ 450.583793][ T7] device hsr_slave_1 left promiscuous mode [ 450.662306][ T7] team0 (unregistering): Port device team_slave_1 removed [ 450.675970][ T7] team0 (unregistering): Port device team_slave_0 removed [ 450.689042][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.767994][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.841467][ T7] bond0 (unregistering): Released all slaves [ 450.974456][ T7] device hsr_slave_0 left promiscuous mode [ 451.013751][ T7] device hsr_slave_1 left promiscuous mode [ 451.075138][ T7] team0 (unregistering): Port device team_slave_1 removed [ 451.090104][ T7] team0 (unregistering): Port device team_slave_0 removed [ 451.101973][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.130245][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.233784][ T7] bond0 (unregistering): Released all slaves [ 451.468557][T11223] chnl_net:caif_netlink_parms(): no params data found [ 451.548272][T11227] chnl_net:caif_netlink_parms(): no params data found [ 451.612735][T11226] chnl_net:caif_netlink_parms(): no params data found [ 451.644045][T11223] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.651253][T11223] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.659342][T11223] device bridge_slave_0 entered promiscuous mode [ 451.667861][T11223] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.675124][T11223] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.683130][T11223] device bridge_slave_1 entered promiscuous mode [ 451.707509][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.714748][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.722646][T11226] device bridge_slave_0 entered promiscuous mode [ 451.744965][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.752027][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.760775][T11226] device bridge_slave_1 entered promiscuous mode [ 451.768339][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.781759][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.789741][T11227] device bridge_slave_0 entered promiscuous mode [ 451.799628][T11223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.815274][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.822498][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.830742][T11227] device bridge_slave_1 entered promiscuous mode [ 451.853228][T11226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.865937][T11223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.892485][T11223] team0: Port device team_slave_0 added [ 451.902372][T11226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.913016][T11223] team0: Port device team_slave_1 added [ 451.975832][T11223] device hsr_slave_0 entered promiscuous mode [ 452.033809][T11223] device hsr_slave_1 entered promiscuous mode [ 452.076006][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.116654][T11226] team0: Port device team_slave_0 added [ 452.124504][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.136176][T11226] team0: Port device team_slave_1 added [ 452.143407][T11223] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.150581][T11223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.157998][T11223] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.165137][T11223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.196356][T11227] team0: Port device team_slave_0 added [ 452.203999][T11227] team0: Port device team_slave_1 added [ 452.257325][T11226] device hsr_slave_0 entered promiscuous mode [ 452.303914][T11226] device hsr_slave_1 entered promiscuous mode [ 452.343752][T11226] debugfs: Directory 'hsr0' with parent '/' already present! [ 452.426486][T11227] device hsr_slave_0 entered promiscuous mode [ 452.464477][T11227] device hsr_slave_1 entered promiscuous mode [ 452.503993][T11227] debugfs: Directory 'hsr0' with parent '/' already present! [ 452.519955][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.527820][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.629392][T11223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.753107][T11223] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.764391][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 452.772230][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 452.816304][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 452.825620][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 452.841606][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.848759][T11171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.866392][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 452.881781][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 452.891619][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.898751][T11171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.915414][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 452.965251][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 452.982227][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.008461][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.026699][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.042930][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 453.063364][T11227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.091403][T11223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.104165][T11223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.140626][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.154964][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 453.176906][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.192942][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 453.203914][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.222552][T11226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.243606][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 453.251286][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.261795][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.286956][T11227] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.310269][T11226] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.332216][T11223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.363076][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.375889][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.442610][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.457662][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.469831][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.476973][T11066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.493168][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.502671][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.522277][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.529459][T11066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.560810][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.581469][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.606375][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.613466][T11066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.636125][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.650938][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.659998][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.667124][T11066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.676196][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.686105][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.716088][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.729633][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.739848][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.749907][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.759346][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.768222][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.776925][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 453.785523][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.794559][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.803136][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.814783][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.822639][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.831117][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 453.839639][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.867525][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.883154][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 453.892462][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 453.908661][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.931982][T11227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.956954][T11227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 453.976827][T11226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.010807][T11226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.022890][T11238] EXT4-fs (sda1): re-mounted. Opts: [ 454.036641][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.078984][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.090870][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.106580][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.171405][T11226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.185760][T11227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.793840][T11255] EXT4-fs (sda1): re-mounted. Opts: 12:52:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:19 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:52:19 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:19 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:19 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 455.148957][ T26] audit: type=1800 audit(1563108739.626:161): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16624 res=0 12:52:19 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:19 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 455.436098][ T26] audit: type=1800 audit(1563108739.916:162): pid=11281 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16634 res=0 12:52:20 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 455.750706][ T26] audit: type=1800 audit(1563108740.226:163): pid=11291 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16608 res=0 12:52:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 456.623345][T11295] IPVS: ftp: loaded support on port[0] = 21 [ 456.705810][T11295] chnl_net:caif_netlink_parms(): no params data found [ 456.739227][T11295] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.746448][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.754701][T11295] device bridge_slave_0 entered promiscuous mode [ 456.763196][T11295] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.770905][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.778966][T11295] device bridge_slave_1 entered promiscuous mode [ 456.799809][T11295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.825721][T11295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.867197][T11295] team0: Port device team_slave_0 added [ 456.883014][T11295] team0: Port device team_slave_1 added [ 457.006453][T11295] device hsr_slave_0 entered promiscuous mode [ 457.043976][T11295] device hsr_slave_1 entered promiscuous mode [ 457.083660][T11295] debugfs: Directory 'hsr0' with parent '/' already present! [ 457.097413][T11298] IPVS: ftp: loaded support on port[0] = 21 [ 457.208613][T11295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.253043][T11298] chnl_net:caif_netlink_parms(): no params data found [ 457.278314][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.286871][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.298678][T11295] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.221180][T11298] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.229090][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.240579][T11298] device bridge_slave_0 entered promiscuous mode [ 458.710821][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.719573][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.728158][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.735281][ T8403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.744378][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 458.752903][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.761340][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.768433][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.776115][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.785032][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.793692][T11298] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.800784][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.809229][T11298] device bridge_slave_1 entered promiscuous mode [ 459.237916][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.262458][T11298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.279188][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.289217][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.299275][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.313080][T11298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.761670][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.773806][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.791418][T11298] team0: Port device team_slave_0 added [ 459.800040][T11298] team0: Port device team_slave_1 added [ 460.232894][T11295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.244649][T11295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.258722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.267344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.276302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.284925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.293254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.748957][T11298] device hsr_slave_0 entered promiscuous mode [ 460.794055][T11298] device hsr_slave_1 entered promiscuous mode [ 460.834033][T11298] debugfs: Directory 'hsr0' with parent '/' already present! [ 460.848134][T11295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.710007][T11298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.906966][T11308] EXT4-fs (sda1): re-mounted. Opts: 12:52:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:52:26 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:26 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 462.017226][ T26] audit: type=1800 audit(1563108746.496:164): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16654 res=0 [ 462.510233][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.518482][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 462.526510][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.546893][ T7] device bridge_slave_1 left promiscuous mode [ 462.553139][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.604684][ T7] device bridge_slave_0 left promiscuous mode [ 462.610842][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.655548][ T7] device bridge_slave_1 left promiscuous mode [ 462.661815][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.714712][ T7] device bridge_slave_0 left promiscuous mode [ 462.720879][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.776183][ T7] device bridge_slave_1 left promiscuous mode [ 462.782343][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.824903][ T7] device bridge_slave_0 left promiscuous mode [ 462.831096][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.876956][ T7] device bridge_slave_1 left promiscuous mode [ 462.883119][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.924896][ T7] device bridge_slave_0 left promiscuous mode [ 462.931049][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.975593][ T7] device bridge_slave_1 left promiscuous mode [ 462.981757][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.024743][ T7] device bridge_slave_0 left promiscuous mode [ 463.031072][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.434230][ T7] device hsr_slave_0 left promiscuous mode [ 472.473872][ T7] device hsr_slave_1 left promiscuous mode [ 472.530919][ T7] team0 (unregistering): Port device team_slave_1 removed [ 472.542654][ T7] team0 (unregistering): Port device team_slave_0 removed [ 472.554646][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.587663][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.662150][ T7] bond0 (unregistering): Released all slaves [ 472.794445][ T7] device hsr_slave_0 left promiscuous mode [ 472.863706][ T7] device hsr_slave_1 left promiscuous mode [ 472.911325][ T7] team0 (unregistering): Port device team_slave_1 removed [ 472.925761][ T7] team0 (unregistering): Port device team_slave_0 removed [ 472.938220][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.989587][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.060490][ T7] bond0 (unregistering): Released all slaves [ 473.214498][ T7] device hsr_slave_0 left promiscuous mode [ 473.253980][ T7] device hsr_slave_1 left promiscuous mode [ 473.305763][ T7] team0 (unregistering): Port device team_slave_1 removed [ 473.319287][ T7] team0 (unregistering): Port device team_slave_0 removed [ 473.330667][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.368918][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.470427][ T7] bond0 (unregistering): Released all slaves [ 473.634525][ T7] device hsr_slave_0 left promiscuous mode [ 473.673949][ T7] device hsr_slave_1 left promiscuous mode [ 473.742727][ T7] team0 (unregistering): Port device team_slave_1 removed [ 473.757496][ T7] team0 (unregistering): Port device team_slave_0 removed [ 473.768697][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.817813][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.910494][ T7] bond0 (unregistering): Released all slaves [ 474.034266][ T7] device hsr_slave_0 left promiscuous mode [ 474.083804][ T7] device hsr_slave_1 left promiscuous mode [ 474.136675][ T7] team0 (unregistering): Port device team_slave_1 removed [ 474.149585][ T7] team0 (unregistering): Port device team_slave_0 removed [ 474.163820][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.198334][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.271877][ T7] bond0 (unregistering): Released all slaves [ 474.390286][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 474.399279][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 474.407972][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.415093][ T8588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.434672][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 474.442779][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 474.451585][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 474.460168][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.467268][ T8588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.476819][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 474.486267][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 474.504524][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 474.513336][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 474.521953][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 474.530667][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.539506][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.547987][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.558040][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 474.566324][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 474.575963][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.588119][T11298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.619557][T11298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.833737][T11325] EXT4-fs (sda1): re-mounted. Opts: 12:52:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:39 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:52:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 474.988620][ T26] audit: type=1800 audit(1563108759.466:165): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16589 res=0 12:52:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 475.158026][ T26] audit: type=1800 audit(1563108759.636:166): pid=11339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16601 res=0 12:52:39 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 475.368915][ T26] audit: type=1800 audit(1563108759.846:167): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16601 res=0 12:52:40 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 475.602970][ T26] audit: type=1800 audit(1563108760.076:168): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16574 res=0 12:52:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 476.382229][T11355] IPVS: ftp: loaded support on port[0] = 21 [ 476.518385][T11355] chnl_net:caif_netlink_parms(): no params data found [ 476.581218][T11355] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.594307][T11355] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.602775][T11355] device bridge_slave_0 entered promiscuous mode [ 476.615911][T11355] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.623066][T11355] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.639068][T11355] device bridge_slave_1 entered promiscuous mode [ 476.735939][T11355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.770521][T11355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.827246][T11355] team0: Port device team_slave_0 added [ 476.844675][T11355] team0: Port device team_slave_1 added [ 476.904754][T11359] IPVS: ftp: loaded support on port[0] = 21 [ 476.921315][T11360] IPVS: ftp: loaded support on port[0] = 21 [ 476.956574][T11355] device hsr_slave_0 entered promiscuous mode [ 477.013914][T11355] device hsr_slave_1 entered promiscuous mode [ 477.291642][T11355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.340540][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 477.348784][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.383136][T11355] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.489914][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.499077][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.508134][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.515262][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.522841][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 477.531543][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.539834][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.546945][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.554622][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 477.573055][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.582590][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 477.596631][T11359] chnl_net:caif_netlink_parms(): no params data found [ 477.606583][T11360] chnl_net:caif_netlink_parms(): no params data found [ 477.648613][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.659128][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.684072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 477.691810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 477.701146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.710131][T11360] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.718333][T11360] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.727058][T11360] device bridge_slave_0 entered promiscuous mode [ 477.742211][T11360] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.749552][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.757593][T11360] device bridge_slave_1 entered promiscuous mode [ 477.771469][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.791656][T11359] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.799702][T11359] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.808797][T11359] device bridge_slave_0 entered promiscuous mode [ 477.818965][T11359] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.828490][T11359] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.836465][T11359] device bridge_slave_1 entered promiscuous mode [ 477.846206][T11360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.858385][T11360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.868882][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.880005][T11355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.900283][T11359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.928235][T11360] team0: Port device team_slave_0 added [ 477.939212][T11359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.963268][T11355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.982284][T11360] team0: Port device team_slave_1 added [ 478.021573][T11359] team0: Port device team_slave_0 added [ 478.086460][T11360] device hsr_slave_0 entered promiscuous mode [ 478.113826][T11360] device hsr_slave_1 entered promiscuous mode [ 478.153611][T11360] debugfs: Directory 'hsr0' with parent '/' already present! [ 478.162383][T11359] team0: Port device team_slave_1 added [ 478.258229][T11359] device hsr_slave_0 entered promiscuous mode [ 478.295046][T11359] device hsr_slave_1 entered promiscuous mode [ 478.344096][T11359] debugfs: Directory 'hsr0' with parent '/' already present! [ 478.373795][T11369] EXT4-fs (sda1): re-mounted. Opts: [ 479.389964][T11360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.407240][T11359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.425369][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.437631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.446313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.458471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.468735][T11360] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.645675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.654721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.663045][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.670155][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.680748][T11359] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.848672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.856616][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.865659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.874171][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.881232][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.073180][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 480.082141][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.091479][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.101258][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.108374][ T8403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.117093][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.126041][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.134527][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.141583][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.149207][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 480.158696][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.167529][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.176140][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.372962][T11359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.384856][T11359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.399692][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.407789][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.416888][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.427499][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.436834][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.445422][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.454008][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.462263][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.471091][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.480925][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.491489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.500887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.511438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.684840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.694062][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.711909][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.720849][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.729281][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.738294][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.749786][T11359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.762789][T11360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.979649][T11360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.015022][ T7] device bridge_slave_1 left promiscuous mode [ 481.021272][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.065344][ T7] device bridge_slave_0 left promiscuous mode [ 481.072767][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.135075][ T7] device bridge_slave_1 left promiscuous mode [ 481.141406][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.184761][T11382] EXT4-fs (sda1): re-mounted. Opts: [ 481.225111][ T7] device bridge_slave_0 left promiscuous mode [ 481.232821][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.294203][ T7] device hsr_slave_0 left promiscuous mode [ 485.333708][ T7] device hsr_slave_1 left promiscuous mode [ 485.410613][ T7] team0 (unregistering): Port device team_slave_1 removed [ 485.424551][ T7] team0 (unregistering): Port device team_slave_0 removed [ 485.436659][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.480905][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.571535][ T7] bond0 (unregistering): Released all slaves [ 485.704647][ T7] device hsr_slave_0 left promiscuous mode [ 485.743812][ T7] device hsr_slave_1 left promiscuous mode [ 485.821089][ T7] team0 (unregistering): Port device team_slave_1 removed [ 485.832967][ T7] team0 (unregistering): Port device team_slave_0 removed [ 485.845353][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.938400][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.029391][ T7] bond0 (unregistering): Released all slaves [ 486.479435][T11391] EXT4-fs (sda1): re-mounted. Opts: 12:52:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:51 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:52:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:52:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 486.655730][ T26] audit: type=1800 audit(1563108771.136:169): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16490 res=0 12:52:51 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 486.878870][ T26] audit: type=1800 audit(1563108771.356:170): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16646 res=0 12:52:51 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:52:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:51 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 487.083862][ T26] audit: type=1800 audit(1563108771.566:171): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16646 res=0 12:52:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:52:51 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 487.264356][ T26] audit: type=1800 audit(1563108771.746:172): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16646 res=0 12:52:51 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 487.388143][ T26] audit: type=1800 audit(1563108771.866:173): pid=11421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16513 res=0 [ 488.127820][T11427] IPVS: ftp: loaded support on port[0] = 21 [ 488.271684][T11427] chnl_net:caif_netlink_parms(): no params data found [ 488.340714][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.355734][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.369474][T11427] device bridge_slave_0 entered promiscuous mode [ 488.381687][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.391552][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.403794][T11427] device bridge_slave_1 entered promiscuous mode [ 488.458354][T11427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.490214][T11427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.557541][T11427] team0: Port device team_slave_0 added [ 488.579199][T11427] team0: Port device team_slave_1 added [ 488.676497][T11427] device hsr_slave_0 entered promiscuous mode [ 488.724003][T11427] device hsr_slave_1 entered promiscuous mode [ 488.803601][T11427] debugfs: Directory 'hsr0' with parent '/' already present! [ 488.816741][T11431] IPVS: ftp: loaded support on port[0] = 21 [ 488.825987][T11432] IPVS: ftp: loaded support on port[0] = 21 [ 489.043390][T11432] chnl_net:caif_netlink_parms(): no params data found [ 489.076178][T11431] chnl_net:caif_netlink_parms(): no params data found [ 489.100477][T11427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.130080][T11432] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.137868][T11432] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.145894][T11432] device bridge_slave_0 entered promiscuous mode [ 489.153816][T11432] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.160884][T11432] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.168894][T11432] device bridge_slave_1 entered promiscuous mode [ 489.200130][T11431] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.207610][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.216786][T11431] device bridge_slave_0 entered promiscuous mode [ 489.229074][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 489.237706][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.246182][T11431] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.253838][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.261603][T11431] device bridge_slave_1 entered promiscuous mode [ 489.276716][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.297450][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.320102][T11427] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.833143][T11431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.847015][T11432] team0: Port device team_slave_0 added [ 490.105286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.114128][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.122426][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.129526][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.137299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.148706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.157352][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.164466][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.173734][T11431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.182829][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.200991][T11432] team0: Port device team_slave_1 added [ 490.211609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.220472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 490.500076][T11431] team0: Port device team_slave_0 added [ 490.506735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.516936][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.526492][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.535606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.551238][T11431] team0: Port device team_slave_1 added [ 490.557871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.572598][T11427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.584363][T11427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.637004][T11432] device hsr_slave_0 entered promiscuous mode [ 490.673959][T11432] device hsr_slave_1 entered promiscuous mode [ 490.713681][T11432] debugfs: Directory 'hsr0' with parent '/' already present! [ 490.984140][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.992392][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.001327][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.009898][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.086024][T11431] device hsr_slave_0 entered promiscuous mode [ 491.123807][T11431] device hsr_slave_1 entered promiscuous mode [ 491.163638][T11431] debugfs: Directory 'hsr0' with parent '/' already present! [ 491.173680][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 491.426727][T11427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.751870][T11432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.779811][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.789548][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.801917][T11432] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.080884][T11431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.111146][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 492.122237][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 492.143490][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.150627][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.160247][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 492.169742][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 492.178355][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.185567][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.306106][T11441] EXT4-fs (sda1): re-mounted. Opts: [ 492.606707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 492.614787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 492.623275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 492.639526][T11431] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.864102][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 492.872707][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 492.881411][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 492.890741][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 492.898834][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.907567][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 493.153251][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 493.161327][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 493.169947][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.178458][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 493.192111][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.200777][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.209641][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.218109][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.225210][ T8403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.233950][T11432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 493.258039][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 493.266344][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.275062][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.283362][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.290477][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.317431][ T7] device bridge_slave_1 left promiscuous mode [ 493.324594][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.364347][ T7] device bridge_slave_0 left promiscuous mode [ 493.370498][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.424902][ T7] device bridge_slave_1 left promiscuous mode [ 493.431052][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.494663][ T7] device bridge_slave_0 left promiscuous mode [ 493.500877][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.535816][ T7] device bridge_slave_1 left promiscuous mode [ 493.541989][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.584454][ T7] device bridge_slave_0 left promiscuous mode [ 493.590651][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.054102][ T7] device hsr_slave_0 left promiscuous mode [ 499.109352][ T7] device hsr_slave_1 left promiscuous mode [ 499.172287][ T7] team0 (unregistering): Port device team_slave_1 removed [ 499.185066][ T7] team0 (unregistering): Port device team_slave_0 removed [ 499.197631][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.241274][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.324822][ T7] bond0 (unregistering): Released all slaves [ 499.474543][ T7] device hsr_slave_0 left promiscuous mode [ 499.513767][ T7] device hsr_slave_1 left promiscuous mode [ 499.591776][ T7] team0 (unregistering): Port device team_slave_1 removed [ 499.609544][ T7] team0 (unregistering): Port device team_slave_0 removed [ 499.620835][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.658597][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.748633][ T7] bond0 (unregistering): Released all slaves [ 499.884583][ T7] device hsr_slave_0 left promiscuous mode [ 499.923943][ T7] device hsr_slave_1 left promiscuous mode [ 500.002965][ T7] team0 (unregistering): Port device team_slave_1 removed [ 500.016440][ T7] team0 (unregistering): Port device team_slave_0 removed [ 500.027777][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.109271][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.183985][ T7] bond0 (unregistering): Released all slaves [ 500.287913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.297410][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.306306][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.320493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.329468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.338022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.346540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.355172][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.363330][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.371674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.380528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.389383][T11431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.407320][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.448941][T11431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.683742][T11456] EXT4-fs (sda1): re-mounted. Opts: [ 500.754029][T11459] EXT4-fs (sda1): re-mounted. Opts: 12:53:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:05 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:05 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:53:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:05 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 500.920299][ T26] audit: type=1800 audit(1563108785.396:174): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16684 res=0 12:53:05 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:05 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 501.094265][ T26] audit: type=1800 audit(1563108785.576:175): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 12:53:05 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:05 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 501.291813][ T26] audit: type=1800 audit(1563108785.766:176): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 12:53:05 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 501.483230][ T26] audit: type=1800 audit(1563108785.956:177): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 12:53:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:06 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 502.204855][ T26] audit: type=1800 audit(1563108786.686:178): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 [ 502.459187][T11500] IPVS: ftp: loaded support on port[0] = 21 [ 502.591767][T11500] chnl_net:caif_netlink_parms(): no params data found [ 502.638762][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.647632][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.656489][T11500] device bridge_slave_0 entered promiscuous mode [ 502.665029][T11500] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.672318][T11500] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.681166][T11500] device bridge_slave_1 entered promiscuous mode [ 502.703244][T11500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.715789][T11500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.737919][T11500] team0: Port device team_slave_0 added [ 502.745549][T11500] team0: Port device team_slave_1 added [ 502.806264][T11500] device hsr_slave_0 entered promiscuous mode [ 502.843917][T11500] device hsr_slave_1 entered promiscuous mode [ 502.896474][T11503] IPVS: ftp: loaded support on port[0] = 21 [ 502.900556][T11500] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.909530][T11500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.916938][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.924023][T11500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.001540][T11500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.032395][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.055017][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.062981][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.082060][T11500] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.116313][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 503.132249][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.139396][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.236759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 503.251197][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.258380][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.308420][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.321809][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.337933][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.351959][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.369130][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.381357][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.390892][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.407089][T11500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.428253][T11500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.442049][T11503] chnl_net:caif_netlink_parms(): no params data found [ 503.466313][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.481692][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.514051][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.618962][T11503] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.636876][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.645703][T11503] device bridge_slave_0 entered promiscuous mode [ 503.654700][T11503] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.661912][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.670671][T11503] device bridge_slave_1 entered promiscuous mode [ 503.692581][T11503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.705734][T11503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.727560][T11503] team0: Port device team_slave_0 added [ 503.737005][T11503] team0: Port device team_slave_1 added [ 503.796499][T11503] device hsr_slave_0 entered promiscuous mode [ 503.843928][T11503] device hsr_slave_1 entered promiscuous mode [ 503.892250][T11511] EXT4-fs (sda1): re-mounted. Opts: [ 503.893638][T11503] debugfs: Directory 'hsr0' with parent '/' already present! [ 503.967255][T11503] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.974419][T11503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.981809][T11503] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.988919][T11503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.279251][T11503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.292518][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.302955][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.312139][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.322685][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 504.341377][T11503] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.367171][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.381857][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.401949][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.409122][T11066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.434982][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 504.444228][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 504.452689][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.459796][ T8495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.471868][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 504.480846][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 504.489562][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 504.498247][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 504.507168][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 504.516671][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 504.525749][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 504.534382][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 504.546734][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 504.554592][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 504.562937][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.573491][T11503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 504.596729][T11503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.712285][T11522] EXT4-fs (sda1): re-mounted. Opts: 12:53:09 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:53:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:09 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:09 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 504.864549][ T26] audit: type=1800 audit(1563108789.346:179): pid=11530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16485 res=0 12:53:09 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 504.988144][ T26] audit: type=1800 audit(1563108789.466:180): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16545 res=0 12:53:09 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:09 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 505.140639][ T26] audit: type=1800 audit(1563108789.616:181): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16499 res=0 12:53:09 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:09 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 505.274008][ T26] audit: type=1800 audit(1563108789.756:182): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16499 res=0 12:53:11 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:11 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 506.636670][T11551] IPVS: ftp: loaded support on port[0] = 21 [ 507.155883][T11557] IPVS: ftp: loaded support on port[0] = 21 [ 507.159527][T11558] IPVS: ftp: loaded support on port[0] = 21 [ 507.860895][T11551] chnl_net:caif_netlink_parms(): no params data found [ 508.261644][T11551] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.270515][T11551] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.278299][T11551] device bridge_slave_0 entered promiscuous mode [ 508.287759][T11551] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.295046][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.302941][T11551] device bridge_slave_1 entered promiscuous mode [ 508.662090][T11551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.714191][T11551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.107944][T11551] team0: Port device team_slave_0 added [ 509.114655][T11558] chnl_net:caif_netlink_parms(): no params data found [ 509.133416][T11551] team0: Port device team_slave_1 added [ 509.524972][T11557] chnl_net:caif_netlink_parms(): no params data found [ 509.595555][T11551] device hsr_slave_0 entered promiscuous mode [ 509.634036][T11551] device hsr_slave_1 entered promiscuous mode [ 509.673588][T11551] debugfs: Directory 'hsr0' with parent '/' already present! [ 509.684846][T11558] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.691916][T11558] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.700328][T11558] device bridge_slave_0 entered promiscuous mode [ 509.708532][T11558] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.715924][T11558] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.723947][T11558] device bridge_slave_1 entered promiscuous mode [ 509.762284][ T7] device bridge_slave_1 left promiscuous mode [ 509.770115][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.805366][ T7] device bridge_slave_0 left promiscuous mode [ 509.811702][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.875539][ T7] device bridge_slave_1 left promiscuous mode [ 509.881762][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.924484][ T7] device bridge_slave_0 left promiscuous mode [ 509.930806][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.995138][ T7] device bridge_slave_1 left promiscuous mode [ 510.001432][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.074705][ T7] device bridge_slave_0 left promiscuous mode [ 510.081018][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.135390][ T7] device bridge_slave_1 left promiscuous mode [ 510.141604][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.195089][ T7] device bridge_slave_0 left promiscuous mode [ 510.201314][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.934255][ T7] device hsr_slave_0 left promiscuous mode [ 517.993829][ T7] device hsr_slave_1 left promiscuous mode [ 518.040107][ T7] team0 (unregistering): Port device team_slave_1 removed [ 518.052934][ T7] team0 (unregistering): Port device team_slave_0 removed [ 518.065477][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.119773][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.202651][ T7] bond0 (unregistering): Released all slaves [ 518.354430][ T7] device hsr_slave_0 left promiscuous mode [ 518.403942][ T7] device hsr_slave_1 left promiscuous mode [ 518.453353][ T7] team0 (unregistering): Port device team_slave_1 removed [ 518.466138][ T7] team0 (unregistering): Port device team_slave_0 removed [ 518.479689][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.539721][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.628362][ T7] bond0 (unregistering): Released all slaves [ 518.784295][ T7] device hsr_slave_0 left promiscuous mode [ 518.843675][ T7] device hsr_slave_1 left promiscuous mode [ 518.905593][ T7] team0 (unregistering): Port device team_slave_1 removed [ 518.917296][ T7] team0 (unregistering): Port device team_slave_0 removed [ 518.932990][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.960666][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.033236][ T7] bond0 (unregistering): Released all slaves [ 519.194546][ T7] device hsr_slave_0 left promiscuous mode [ 519.243694][ T7] device hsr_slave_1 left promiscuous mode [ 519.296331][ T7] team0 (unregistering): Port device team_slave_1 removed [ 519.310502][ T7] team0 (unregistering): Port device team_slave_0 removed [ 519.321947][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.352154][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.420421][ T7] bond0 (unregistering): Released all slaves [ 519.544432][T11558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.554941][T11557] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.562008][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.573943][T11557] device bridge_slave_0 entered promiscuous mode [ 519.581809][T11557] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.589185][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.597563][T11557] device bridge_slave_1 entered promiscuous mode [ 519.606712][T11558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.652740][T11557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.665521][T11558] team0: Port device team_slave_0 added [ 519.674355][T11558] team0: Port device team_slave_1 added [ 519.690856][T11557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.766352][T11558] device hsr_slave_0 entered promiscuous mode [ 519.823998][T11558] device hsr_slave_1 entered promiscuous mode [ 519.879000][T11557] team0: Port device team_slave_0 added [ 519.896358][T11557] team0: Port device team_slave_1 added [ 519.967377][T11557] device hsr_slave_0 entered promiscuous mode [ 520.034032][T11557] device hsr_slave_1 entered promiscuous mode [ 520.093608][T11557] debugfs: Directory 'hsr0' with parent '/' already present! [ 520.109596][T11551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.146069][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.154022][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.166480][T11551] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.323949][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.332566][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.341248][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.348398][ T8495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.356247][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.365022][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.373736][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.380794][ T8495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.388624][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 520.397470][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 520.406323][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 520.415151][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.424009][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 520.433452][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.442315][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 520.450910][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.459865][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.468091][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 520.516962][T11551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.534472][T11551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 520.546207][T11558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.567883][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 520.582365][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.608138][T11558] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.635477][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.643292][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.671025][T11551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.692137][T11557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.718058][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.729608][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.742617][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.749763][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.764657][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.785305][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.802892][ T2842] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.810006][ T2842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.823832][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 520.832604][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 520.847813][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.863777][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 520.872446][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.899288][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 520.922665][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.949065][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.966923][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 520.980097][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.995223][T11557] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.019274][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.044167][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.056782][T11558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.074943][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.105718][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.115733][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.131967][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.142976][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.159823][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.166978][T11066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.182780][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.192043][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.208646][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.215787][T11066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.219250][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.236850][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.272701][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 521.290040][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.310155][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.327587][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.340336][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.369949][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.402778][ T8495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.426964][T11557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.451223][T11557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.466446][T11558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.480110][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.489725][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.499026][T11066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.929063][T11557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.184584][T11582] EXT4-fs (sda1): re-mounted. Opts: [ 522.286393][T11589] EXT4-fs (sda1): re-mounted. Opts: 12:53:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:53:26 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:26 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:27 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 522.504313][ T26] audit: type=1800 audit(1563108806.986:183): pid=11598 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16699 res=0 12:53:27 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:27 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 522.704251][ T26] audit: type=1800 audit(1563108807.186:184): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16714 res=0 12:53:27 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:27 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 522.903244][ T26] audit: type=1800 audit(1563108807.376:185): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16714 res=0 12:53:27 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 523.088005][ T26] audit: type=1800 audit(1563108807.566:186): pid=11617 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16714 res=0 12:53:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:53:28 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:28 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 523.585209][ T26] audit: type=1800 audit(1563108808.066:187): pid=11622 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16728 res=0 [ 524.120877][T11627] IPVS: ftp: loaded support on port[0] = 21 [ 524.200155][T11627] chnl_net:caif_netlink_parms(): no params data found [ 524.231608][T11627] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.239134][T11627] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.247449][T11627] device bridge_slave_0 entered promiscuous mode [ 524.255372][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.262488][T11627] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.272404][T11627] device bridge_slave_1 entered promiscuous mode [ 524.299145][T11627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.317042][T11627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.340999][T11627] team0: Port device team_slave_0 added [ 524.349135][T11627] team0: Port device team_slave_1 added [ 524.415639][T11627] device hsr_slave_0 entered promiscuous mode [ 524.454087][T11627] device hsr_slave_1 entered promiscuous mode [ 524.503634][T11627] debugfs: Directory 'hsr0' with parent '/' already present! [ 524.523098][T11630] IPVS: ftp: loaded support on port[0] = 21 [ 524.523308][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.536177][T11627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.543675][T11627] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.550793][T11627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.677671][T11627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.715161][T11630] chnl_net:caif_netlink_parms(): no params data found [ 524.736807][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.760886][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.769781][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.789863][T11627] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.820123][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.827567][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.835976][T11630] device bridge_slave_0 entered promiscuous mode [ 524.844685][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.853070][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.860207][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.869296][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.880853][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.888705][T11630] device bridge_slave_1 entered promiscuous mode [ 524.916297][T11630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.926551][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.939307][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.946455][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.958738][T11630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.653448][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.662402][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.671970][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.686041][T11630] team0: Port device team_slave_0 added [ 525.693177][T11630] team0: Port device team_slave_1 added [ 526.041493][T11627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.053834][T11627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.067312][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.076121][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.085512][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.094745][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.103176][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.187173][T11630] device hsr_slave_0 entered promiscuous mode [ 526.224484][T11630] device hsr_slave_1 entered promiscuous mode [ 526.283694][T11630] debugfs: Directory 'hsr0' with parent '/' already present! [ 526.631316][T11627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.075905][T11630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.097100][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 527.119632][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 527.229689][T11638] EXT4-fs (sda1): re-mounted. Opts: [ 527.636458][T11630] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.850605][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 527.859455][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 527.869630][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.876774][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.885118][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 527.893975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.902398][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.909512][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.917502][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 527.926618][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 527.935726][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 528.256585][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 528.265572][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 528.274235][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 528.283075][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 528.292391][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 528.596370][T11630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.607246][T11630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.619953][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 528.628911][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 528.637880][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 528.646562][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 528.657016][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 528.961671][T11630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.306039][ T7] device bridge_slave_1 left promiscuous mode [ 529.312294][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.335580][ T7] device bridge_slave_0 left promiscuous mode [ 529.341814][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.388391][ T7] device bridge_slave_1 left promiscuous mode [ 529.395018][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.445173][ T7] device bridge_slave_0 left promiscuous mode [ 529.447542][T11649] EXT4-fs (sda1): re-mounted. Opts: [ 529.451806][ T7] bridge0: port 1(bridge_slave_0) entered disabled state 12:53:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:33 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:33 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:53:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 529.495597][ T7] device bridge_slave_1 left promiscuous mode [ 529.501822][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.570093][ T26] audit: type=1800 audit(1563108814.046:188): pid=11655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16577 res=0 12:53:34 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:34 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 529.624922][ T7] device bridge_slave_0 left promiscuous mode [ 529.631140][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.716415][ T26] audit: type=1800 audit(1563108814.196:189): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16577 res=0 [ 529.738298][ T7] device bridge_slave_1 left promiscuous mode [ 529.756093][ T7] bridge0: port 2(bridge_slave_1) entered disabled state 12:53:34 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:34 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 529.824527][ T7] device bridge_slave_0 left promiscuous mode [ 529.834490][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.896822][ T26] audit: type=1800 audit(1563108814.376:190): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 12:53:34 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:34 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 530.072497][ T26] audit: type=1800 audit(1563108814.546:191): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 [ 537.373937][ T7] device hsr_slave_0 left promiscuous mode [ 537.433876][ T7] device hsr_slave_1 left promiscuous mode [ 537.510221][ T7] team0 (unregistering): Port device team_slave_1 removed [ 537.524285][ T7] team0 (unregistering): Port device team_slave_0 removed [ 537.535848][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.589910][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.682105][ T7] bond0 (unregistering): Released all slaves [ 537.884280][ T7] device hsr_slave_0 left promiscuous mode [ 537.923812][ T7] device hsr_slave_1 left promiscuous mode [ 537.973742][ T7] team0 (unregistering): Port device team_slave_1 removed [ 537.985547][ T7] team0 (unregistering): Port device team_slave_0 removed [ 537.996525][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.067710][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.140613][ T7] bond0 (unregistering): Released all slaves [ 538.294441][ T7] device hsr_slave_0 left promiscuous mode [ 538.353780][ T7] device hsr_slave_1 left promiscuous mode [ 538.412025][ T7] team0 (unregistering): Port device team_slave_1 removed [ 538.424913][ T7] team0 (unregistering): Port device team_slave_0 removed [ 538.435924][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.478665][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.577907][ T7] bond0 (unregistering): Released all slaves [ 538.735215][ T7] device hsr_slave_0 left promiscuous mode [ 538.793718][ T7] device hsr_slave_1 left promiscuous mode [ 538.861911][ T7] team0 (unregistering): Port device team_slave_1 removed [ 538.876069][ T7] team0 (unregistering): Port device team_slave_0 removed [ 538.888271][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.930683][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.020992][ T7] bond0 (unregistering): Released all slaves [ 539.377654][T11679] IPVS: ftp: loaded support on port[0] = 21 [ 539.377905][T11683] IPVS: ftp: loaded support on port[0] = 21 12:53:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 539.419251][T11682] IPVS: ftp: loaded support on port[0] = 21 [ 539.607662][T11679] chnl_net:caif_netlink_parms(): no params data found [ 539.701640][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.709761][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.717973][T11679] device bridge_slave_0 entered promiscuous mode [ 539.728066][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.735621][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.743358][T11679] device bridge_slave_1 entered promiscuous mode [ 539.766909][T11683] chnl_net:caif_netlink_parms(): no params data found [ 539.784081][T11682] chnl_net:caif_netlink_parms(): no params data found [ 539.815330][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.849774][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.864782][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.871863][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.884764][T11682] device bridge_slave_0 entered promiscuous mode [ 539.917428][T11682] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.925320][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.933139][T11682] device bridge_slave_1 entered promiscuous mode [ 539.942618][T11679] team0: Port device team_slave_0 added [ 539.953697][T11683] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.960769][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.968922][T11683] device bridge_slave_0 entered promiscuous mode [ 539.982008][T11683] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.989384][T11683] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.997437][T11683] device bridge_slave_1 entered promiscuous mode [ 540.005620][T11679] team0: Port device team_slave_1 added [ 540.028631][T11682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.147087][T11683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.157838][T11682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.230180][T11683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.326393][T11679] device hsr_slave_0 entered promiscuous mode [ 540.364012][T11679] device hsr_slave_1 entered promiscuous mode [ 540.429024][T11682] team0: Port device team_slave_0 added [ 540.438483][T11683] team0: Port device team_slave_0 added [ 540.447480][T11682] team0: Port device team_slave_1 added [ 540.459179][T11683] team0: Port device team_slave_1 added [ 540.556918][T11682] device hsr_slave_0 entered promiscuous mode [ 540.593932][T11682] device hsr_slave_1 entered promiscuous mode [ 540.633654][T11682] debugfs: Directory 'hsr0' with parent '/' already present! [ 540.676247][T11683] device hsr_slave_0 entered promiscuous mode [ 540.784282][T11683] device hsr_slave_1 entered promiscuous mode [ 540.863738][T11683] debugfs: Directory 'hsr0' with parent '/' already present! [ 540.958426][T11679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.013317][T11679] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.030605][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.038935][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.074441][T11682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.101456][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.110539][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.119548][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.126691][ T8400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.148300][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.164387][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.173080][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.182369][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.189515][ T8587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.198061][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.207087][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.215106][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.234534][T11683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.241454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.250758][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 541.260111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 541.268782][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.278764][T11682] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.303181][T11683] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.310597][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 541.320912][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 541.329657][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 541.338330][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.351935][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.359793][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.376280][T11679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.402139][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.431184][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.454235][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.462862][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.469982][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.480146][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.489524][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.498379][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.505492][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.514227][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.523013][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 541.532407][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.540878][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.550036][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.559151][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.566263][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.574674][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.583383][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.592186][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.599313][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.607905][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.617078][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.625221][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.650164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 541.659134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 541.667984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.681524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 541.691199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 541.699904][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.709360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 541.718111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.726564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 541.735830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 541.745127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.753054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.785231][T11682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.807640][T11682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.829708][T11679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.842217][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 541.851664][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 541.878081][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 541.898820][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.930023][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 541.938820][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.958184][T11683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.977387][T11683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.994132][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.002605][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.020293][T11682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.112272][T11683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.452388][T11704] EXT4-fs (sda1): re-mounted. Opts: 12:53:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:47 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:47 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 542.847100][ T26] audit: type=1800 audit(1563108827.326:192): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16759 res=0 12:53:47 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:47 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:47 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 543.062856][ T26] audit: type=1800 audit(1563108827.536:193): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16750 res=0 12:53:47 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:47 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 543.255250][ T26] audit: type=1800 audit(1563108827.736:194): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16750 res=0 12:53:47 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 543.434323][ T26] audit: type=1800 audit(1563108827.916:195): pid=11743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16735 res=0 12:53:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:53:48 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:53:48 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:53:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 544.055085][ T26] audit: type=1800 audit(1563108828.536:196): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16744 res=0 [ 544.371123][T11752] IPVS: ftp: loaded support on port[0] = 21 [ 544.443257][T11752] chnl_net:caif_netlink_parms(): no params data found [ 544.478625][T11752] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.486983][T11752] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.495066][T11752] device bridge_slave_0 entered promiscuous mode [ 544.502713][T11752] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.510123][T11752] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.518327][T11752] device bridge_slave_1 entered promiscuous mode [ 544.537926][T11752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.549453][T11752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.569849][T11752] team0: Port device team_slave_0 added [ 544.577332][T11752] team0: Port device team_slave_1 added [ 544.636876][T11752] device hsr_slave_0 entered promiscuous mode [ 544.674034][T11752] device hsr_slave_1 entered promiscuous mode [ 544.733692][T11752] debugfs: Directory 'hsr0' with parent '/' already present! [ 545.640389][T11755] IPVS: ftp: loaded support on port[0] = 21 [ 546.579946][T11755] chnl_net:caif_netlink_parms(): no params data found [ 547.028709][T11752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.036858][T11755] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.044376][T11755] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.052312][T11755] device bridge_slave_0 entered promiscuous mode [ 547.060073][T11755] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.067333][T11755] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.075197][T11755] device bridge_slave_1 entered promiscuous mode [ 547.529072][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.537430][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.547933][T11752] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.561018][T11755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.026532][T11755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.037004][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 548.046060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 548.055405][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.062461][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.072816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 548.082167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 548.090857][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.098233][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.106562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 548.115592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 548.124397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 548.132937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 548.596554][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 548.604789][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 548.612496][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 548.621052][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 548.633046][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 548.642079][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 548.650529][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 548.658879][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 548.674439][T11752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 549.118437][T11755] team0: Port device team_slave_0 added [ 549.131216][T11755] team0: Port device team_slave_1 added [ 549.196661][T11755] device hsr_slave_0 entered promiscuous mode [ 549.234028][T11755] device hsr_slave_1 entered promiscuous mode [ 549.273630][T11755] debugfs: Directory 'hsr0' with parent '/' already present! [ 549.289577][T11752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.777146][ T7] device bridge_slave_1 left promiscuous mode [ 549.783380][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.844721][ T7] device bridge_slave_0 left promiscuous mode [ 549.851251][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.914870][ T7] device bridge_slave_1 left promiscuous mode [ 549.921186][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.984747][ T7] device bridge_slave_0 left promiscuous mode [ 549.990961][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.045433][ T7] device bridge_slave_1 left promiscuous mode [ 550.051662][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.104699][ T7] device bridge_slave_0 left promiscuous mode [ 550.110907][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.164730][ T7] device bridge_slave_1 left promiscuous mode [ 550.170908][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.225029][ T7] device bridge_slave_0 left promiscuous mode [ 550.231247][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.265642][ T7] device bridge_slave_1 left promiscuous mode [ 550.271837][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.314396][ T7] device bridge_slave_0 left promiscuous mode [ 550.323023][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.564118][ T7] device hsr_slave_0 left promiscuous mode [ 559.603803][ T7] device hsr_slave_1 left promiscuous mode [ 559.680268][ T7] team0 (unregistering): Port device team_slave_1 removed [ 559.693052][ T7] team0 (unregistering): Port device team_slave_0 removed [ 559.705689][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.751479][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.831437][ T7] bond0 (unregistering): Released all slaves [ 559.995252][ T7] device hsr_slave_0 left promiscuous mode [ 560.043792][ T7] device hsr_slave_1 left promiscuous mode [ 560.096418][ T7] team0 (unregistering): Port device team_slave_1 removed [ 560.109561][ T7] team0 (unregistering): Port device team_slave_0 removed [ 560.121908][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.169962][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.254730][ T7] bond0 (unregistering): Released all slaves [ 560.435127][ T7] device hsr_slave_0 left promiscuous mode [ 560.473718][ T7] device hsr_slave_1 left promiscuous mode [ 560.523102][ T7] team0 (unregistering): Port device team_slave_1 removed [ 560.537239][ T7] team0 (unregistering): Port device team_slave_0 removed [ 560.549552][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.600262][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.672507][ T7] bond0 (unregistering): Released all slaves [ 560.824441][ T7] device hsr_slave_0 left promiscuous mode [ 560.863925][ T7] device hsr_slave_1 left promiscuous mode [ 560.922118][ T7] team0 (unregistering): Port device team_slave_1 removed [ 560.935815][ T7] team0 (unregistering): Port device team_slave_0 removed [ 560.948617][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.009545][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.095990][ T7] bond0 (unregistering): Released all slaves [ 561.254212][ T7] device hsr_slave_0 left promiscuous mode [ 561.304621][ T7] device hsr_slave_1 left promiscuous mode [ 561.385659][ T7] team0 (unregistering): Port device team_slave_1 removed [ 561.397323][ T7] team0 (unregistering): Port device team_slave_0 removed [ 561.408824][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.448285][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.531079][ T7] bond0 (unregistering): Released all slaves [ 561.703424][T11755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.733743][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 561.741555][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 561.753467][T11755] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.776999][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 561.786308][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 561.795779][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.802854][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.812196][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 561.821004][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 561.831009][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 561.840860][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.847973][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.862607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 561.871564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 561.908659][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 561.917829][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 561.926953][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 12:54:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:54:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:06 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 561.952891][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 561.964649][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 561.975064][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 561.984658][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 562.015027][ T26] audit: type=1800 audit(1563108846.496:197): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16529 res=0 [ 562.055043][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 12:54:06 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 562.075092][T11755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 562.091163][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 12:54:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:06 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 562.198795][ T26] audit: type=1800 audit(1563108846.676:198): pid=11777 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16625 res=0 [ 562.237651][T11755] 8021q: adding VLAN 0 to HW filter on device batadv0 12:54:06 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 562.353164][ T26] audit: type=1800 audit(1563108846.826:199): pid=11781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16625 res=0 12:54:06 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 562.541428][ T26] audit: type=1800 audit(1563108847.016:200): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16689 res=0 12:54:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:07 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 563.935021][T11807] IPVS: ftp: loaded support on port[0] = 21 [ 563.956744][T11809] IPVS: ftp: loaded support on port[0] = 21 [ 564.194003][T11809] chnl_net:caif_netlink_parms(): no params data found [ 564.226779][T11807] chnl_net:caif_netlink_parms(): no params data found [ 564.249908][T11809] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.257279][T11809] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.270597][T11809] device bridge_slave_0 entered promiscuous mode [ 564.301463][T11809] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.315317][T11809] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.328094][T11809] device bridge_slave_1 entered promiscuous mode [ 564.358858][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.371093][T11807] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.382222][T11807] device bridge_slave_0 entered promiscuous mode [ 564.407058][T11809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.416517][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.424222][T11807] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.432334][T11807] device bridge_slave_1 entered promiscuous mode [ 564.441722][T11809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.478728][T11807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.489881][T11809] team0: Port device team_slave_0 added [ 564.497970][T11809] team0: Port device team_slave_1 added [ 564.512528][T11807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.556578][T11809] device hsr_slave_0 entered promiscuous mode [ 564.593999][T11809] device hsr_slave_1 entered promiscuous mode [ 564.684362][T11809] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.691466][T11809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.698882][T11809] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.705978][T11809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.725886][T11807] team0: Port device team_slave_0 added [ 564.744903][T11807] team0: Port device team_slave_1 added [ 564.812880][T11807] device hsr_slave_0 entered promiscuous mode [ 564.854037][T11807] device hsr_slave_1 entered promiscuous mode [ 564.893635][T11807] debugfs: Directory 'hsr0' with parent '/' already present! [ 564.952282][T11809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.962511][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.969696][T11807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.977210][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.984351][T11807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.025597][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.039858][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.048635][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.064304][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.072049][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.094584][T11809] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.123109][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 565.138848][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.149827][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.156956][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.181251][T11807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.209763][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.221235][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.237979][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.245122][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.259718][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.273176][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.310724][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 565.320127][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.328325][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.338405][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.347559][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.356491][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.365150][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.373337][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.384664][T11807] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.397492][T11809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.409624][T11809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.419099][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.427280][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.435753][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.452725][T11809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.464849][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 565.474550][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.483119][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.490273][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.502458][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.519015][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.528850][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.536034][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.561139][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.570422][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.579709][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.590617][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.599699][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.610504][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.619743][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.640268][T11807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 565.651193][T11807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.665119][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.675787][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.684473][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.692928][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.712826][T11807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.727543][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.745080][T11818] EXT4-fs (sda1): re-mounted. Opts: 12:54:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:54:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 565.851472][ T26] audit: type=1800 audit(1563108850.326:201): pid=11826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16485 res=0 [ 566.149029][T11831] EXT4-fs (sda1): re-mounted. Opts: 12:54:10 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:10 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 566.255135][ T26] audit: type=1800 audit(1563108850.736:202): pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16513 res=0 12:54:10 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:10 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 566.454471][ T26] audit: type=1800 audit(1563108850.936:203): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16765 res=0 12:54:11 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:11 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 566.674407][ T26] audit: type=1800 audit(1563108851.156:204): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16545 res=0 12:54:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:54:11 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 567.416796][T11862] IPVS: ftp: loaded support on port[0] = 21 [ 567.860169][T11864] IPVS: ftp: loaded support on port[0] = 21 [ 568.095798][T11862] chnl_net:caif_netlink_parms(): no params data found [ 568.310296][T11862] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.321777][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.335499][T11862] device bridge_slave_0 entered promiscuous mode [ 568.500872][T11862] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.508170][T11862] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.516226][T11862] device bridge_slave_1 entered promiscuous mode [ 568.713996][T11862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.743376][T11862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.772088][T11862] team0: Port device team_slave_0 added [ 568.942590][T11862] team0: Port device team_slave_1 added [ 568.960723][T11864] chnl_net:caif_netlink_parms(): no params data found [ 569.026496][T11862] device hsr_slave_0 entered promiscuous mode [ 569.064801][T11862] device hsr_slave_1 entered promiscuous mode [ 569.103705][T11862] debugfs: Directory 'hsr0' with parent '/' already present! [ 569.311419][T11864] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.319883][T11864] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.329026][T11864] device bridge_slave_0 entered promiscuous mode [ 569.338998][ T7] device bridge_slave_1 left promiscuous mode [ 569.345533][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.385147][ T7] device bridge_slave_0 left promiscuous mode [ 569.391537][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.437222][ T7] device bridge_slave_1 left promiscuous mode [ 569.443394][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.514874][ T7] device bridge_slave_0 left promiscuous mode [ 569.521122][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.624093][ T7] device hsr_slave_0 left promiscuous mode [ 573.683677][ T7] device hsr_slave_1 left promiscuous mode [ 573.750308][ T7] team0 (unregistering): Port device team_slave_1 removed [ 573.765027][ T7] team0 (unregistering): Port device team_slave_0 removed [ 573.777881][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.828281][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.917979][ T7] bond0 (unregistering): Released all slaves [ 574.044418][ T7] device hsr_slave_0 left promiscuous mode [ 574.094246][ T7] device hsr_slave_1 left promiscuous mode [ 574.155892][ T7] team0 (unregistering): Port device team_slave_1 removed [ 574.169328][ T7] team0 (unregistering): Port device team_slave_0 removed [ 574.180696][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.228454][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.314599][ T7] bond0 (unregistering): Released all slaves [ 574.417900][T11864] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.425219][T11864] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.433153][T11864] device bridge_slave_1 entered promiscuous mode [ 574.456911][T11864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.471654][T11864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.502519][T11864] team0: Port device team_slave_0 added [ 574.510226][T11864] team0: Port device team_slave_1 added [ 574.575611][T11864] device hsr_slave_0 entered promiscuous mode [ 574.624042][T11864] device hsr_slave_1 entered promiscuous mode [ 574.673688][T11864] debugfs: Directory 'hsr0' with parent '/' already present! [ 574.710737][T11862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.735733][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 574.745405][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 574.756218][T11862] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.881951][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 574.891207][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 574.906597][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.913741][ T8852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.927500][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 574.938259][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 574.951002][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.958316][ T8852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.991771][T11864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.000152][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 575.014714][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 575.022739][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 575.040430][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 575.050012][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 575.065018][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 575.078752][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 575.088704][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 575.102451][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 575.111162][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 575.129293][T11862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.148022][T11862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 575.167251][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 575.178814][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 575.191505][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 575.207969][T11864] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.229980][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 575.244445][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.282410][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.292059][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.308981][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.316124][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.330370][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.339211][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.353721][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.360787][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.374717][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 575.390801][T11862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.410304][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 575.420537][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 575.450320][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 575.460068][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 575.476123][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 575.495317][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 575.516776][T11864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 575.592468][T11864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.785129][T11874] EXT4-fs (sda1): re-mounted. Opts: 12:54:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 575.906725][ T26] audit: type=1800 audit(1563108860.386:205): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16777 res=0 12:54:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:20 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 576.166732][ T26] audit: type=1800 audit(1563108860.646:206): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16609 res=0 12:54:20 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:20 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 576.404130][ T26] audit: type=1800 audit(1563108860.886:207): pid=11902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16721 res=0 12:54:21 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:21 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 576.673442][ T26] audit: type=1800 audit(1563108861.146:208): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16641 res=0 12:54:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:21 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:21 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 577.133399][ T26] audit: type=1800 audit(1563108861.606:209): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16641 res=0 [ 577.683426][T11921] IPVS: ftp: loaded support on port[0] = 21 [ 577.755433][T11921] chnl_net:caif_netlink_parms(): no params data found [ 577.787769][T11921] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.795136][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.803101][T11921] device bridge_slave_0 entered promiscuous mode [ 577.811224][T11921] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.818620][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.827068][T11921] device bridge_slave_1 entered promiscuous mode [ 577.846686][T11921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.857911][T11921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.879292][T11921] team0: Port device team_slave_0 added [ 577.886857][T11921] team0: Port device team_slave_1 added [ 577.946399][T11921] device hsr_slave_0 entered promiscuous mode [ 577.973899][T11921] device hsr_slave_1 entered promiscuous mode [ 578.023832][T11921] debugfs: Directory 'hsr0' with parent '/' already present! [ 578.043983][T11921] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.051100][T11921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.058559][T11921] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.061335][T11924] IPVS: ftp: loaded support on port[0] = 21 [ 578.065671][T11921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.085707][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.094408][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.225399][T11924] chnl_net:caif_netlink_parms(): no params data found [ 578.276407][T11921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.288333][T11924] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.298405][T11924] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.306616][T11924] device bridge_slave_0 entered promiscuous mode [ 578.314849][T11924] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.322398][T11924] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.330447][T11924] device bridge_slave_1 entered promiscuous mode [ 579.036319][T11924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.051887][T11921] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.061159][T11924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.078097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 579.085847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 579.110321][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 579.119808][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 579.128577][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.135679][ T8403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.143410][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 579.152351][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 579.162053][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.169164][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.176915][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 579.187350][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 579.197224][T11924] team0: Port device team_slave_0 added [ 579.555865][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 579.564594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 579.573182][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 579.582262][T11924] team0: Port device team_slave_1 added [ 579.593852][T11921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.604382][T11921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.618165][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 579.626999][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 579.635346][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 579.643909][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 579.652130][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 579.660611][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.669098][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.912963][T11921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.935501][T11924] device hsr_slave_0 entered promiscuous mode [ 579.964032][T11924] device hsr_slave_1 entered promiscuous mode [ 580.023866][T11924] debugfs: Directory 'hsr0' with parent '/' already present! [ 580.292642][T11932] EXT4-fs (sda1): re-mounted. Opts: 12:54:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:24 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 580.358337][ T26] audit: type=1800 audit(1563108864.836:210): pid=11937 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16795 res=0 [ 580.845952][T11924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.859795][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 580.868435][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 580.877816][T11924] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.889857][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 580.899249][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.907770][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.914858][ T8401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.174830][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 581.182941][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 581.192168][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 581.200761][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.207886][ T8401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.216869][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 581.225696][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 581.532283][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 581.541191][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 581.550259][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 581.568492][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 581.577361][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 581.587124][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 581.596197][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 581.605300][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 581.613967][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 581.626540][T11924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 581.934644][T11924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.959573][ T7] device bridge_slave_1 left promiscuous mode [ 581.966193][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.005205][ T7] device bridge_slave_0 left promiscuous mode [ 582.011400][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.065491][ T7] device bridge_slave_1 left promiscuous mode [ 582.071655][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.114505][ T7] device bridge_slave_0 left promiscuous mode [ 582.120658][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.175973][ T7] device bridge_slave_1 left promiscuous mode [ 582.182154][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.224625][ T7] device bridge_slave_0 left promiscuous mode [ 582.230783][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.265160][ T7] device bridge_slave_1 left promiscuous mode [ 582.271314][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.324552][ T7] device bridge_slave_0 left promiscuous mode [ 582.330720][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.504196][ T7] device hsr_slave_0 left promiscuous mode [ 589.543709][ T7] device hsr_slave_1 left promiscuous mode [ 589.621030][ T7] team0 (unregistering): Port device team_slave_1 removed [ 589.634276][ T7] team0 (unregistering): Port device team_slave_0 removed [ 589.645925][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.698529][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.782597][ T7] bond0 (unregistering): Released all slaves [ 589.934553][ T7] device hsr_slave_0 left promiscuous mode [ 589.993809][ T7] device hsr_slave_1 left promiscuous mode [ 590.055139][ T7] team0 (unregistering): Port device team_slave_1 removed [ 590.067470][ T7] team0 (unregistering): Port device team_slave_0 removed [ 590.078256][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.148106][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.225682][ T7] bond0 (unregistering): Released all slaves [ 590.364469][ T7] device hsr_slave_0 left promiscuous mode [ 590.408866][ T7] device hsr_slave_1 left promiscuous mode [ 590.497384][ T7] team0 (unregistering): Port device team_slave_1 removed [ 590.510556][ T7] team0 (unregistering): Port device team_slave_0 removed [ 590.522745][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.549726][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.641232][ T7] bond0 (unregistering): Released all slaves [ 590.824518][ T7] device hsr_slave_0 left promiscuous mode [ 590.863876][ T7] device hsr_slave_1 left promiscuous mode [ 590.914206][ T7] team0 (unregistering): Port device team_slave_1 removed [ 590.927061][ T7] team0 (unregistering): Port device team_slave_0 removed [ 590.938308][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.999146][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.090708][ T7] bond0 (unregistering): Released all slaves 12:54:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:54:35 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:35 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:35 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 591.489881][ T26] audit: type=1800 audit(1563108875.966:211): pid=11953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16498 res=0 [ 591.610543][ T26] audit: type=1800 audit(1563108876.086:212): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16673 res=0 12:54:36 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:36 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 591.771035][ T26] audit: type=1800 audit(1563108876.236:213): pid=11964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16577 res=0 12:54:36 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:36 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:36 executing program 0: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 592.061931][ T26] audit: type=1800 audit(1563108876.536:214): pid=11975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16641 res=0 12:54:36 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:36 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 592.253345][ T26] audit: type=1800 audit(1563108876.726:215): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16641 res=0 [ 593.043215][T11992] IPVS: ftp: loaded support on port[0] = 21 [ 593.135356][T11992] chnl_net:caif_netlink_parms(): no params data found [ 593.174972][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.182261][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.190351][T11992] device bridge_slave_0 entered promiscuous mode [ 593.198613][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.205928][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.214087][T11992] device bridge_slave_1 entered promiscuous mode [ 593.236771][T11992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.250545][T11992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.281292][T11992] team0: Port device team_slave_0 added [ 593.290103][T11992] team0: Port device team_slave_1 added [ 593.360354][T11992] device hsr_slave_0 entered promiscuous mode [ 593.414039][T11992] device hsr_slave_1 entered promiscuous mode [ 593.463312][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.470448][T11992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.477838][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.484946][T11992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.533098][T11996] IPVS: ftp: loaded support on port[0] = 21 [ 593.590090][T11997] IPVS: ftp: loaded support on port[0] = 21 [ 593.610809][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.651687][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.666093][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 593.678605][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.687442][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.701547][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 593.770408][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 593.785416][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.792482][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.834688][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.844475][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.851542][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.933292][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.942930][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.985028][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 593.993185][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.035365][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.047084][T11996] chnl_net:caif_netlink_parms(): no params data found [ 594.074544][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.122768][T11997] chnl_net:caif_netlink_parms(): no params data found [ 594.162233][T11996] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.169708][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.178890][T11996] device bridge_slave_0 entered promiscuous mode [ 594.193460][T11992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.209307][T11996] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.218964][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.242327][T11996] device bridge_slave_1 entered promiscuous mode [ 594.263250][T11997] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.270754][T11997] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.287277][T11997] device bridge_slave_0 entered promiscuous mode [ 594.321526][T11997] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.331521][T11997] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.355386][T11997] device bridge_slave_1 entered promiscuous mode [ 594.370289][T11996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.406206][T11996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.417727][T11997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.449756][T11997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.489151][T11996] team0: Port device team_slave_0 added [ 594.498003][T11997] team0: Port device team_slave_0 added [ 594.524028][T11997] team0: Port device team_slave_1 added [ 594.555252][T11996] team0: Port device team_slave_1 added [ 594.564388][T12006] EXT4-fs (sda1): re-mounted. Opts: 12:54:39 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:39 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 594.638083][T11997] device hsr_slave_0 entered promiscuous mode [ 594.704069][T11997] device hsr_slave_1 entered promiscuous mode [ 594.749683][T11997] debugfs: Directory 'hsr0' with parent '/' already present! [ 594.805447][T11996] device hsr_slave_0 entered promiscuous mode [ 594.843815][T11996] device hsr_slave_1 entered promiscuous mode [ 594.883636][T11996] debugfs: Directory 'hsr0' with parent '/' already present! [ 595.102128][T11997] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.109207][T11997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.116591][T11997] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.123689][T11997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.195570][T11996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.227164][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.242629][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.251210][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 595.267805][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.275869][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 595.296478][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.309808][T11997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.325216][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 595.334814][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 595.343330][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.350474][ T8401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.371915][T11997] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.394111][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 595.402624][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 595.411974][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 595.421569][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.428685][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.438380][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.446207][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 595.454124][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 595.462722][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 595.486456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 595.499934][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 595.508999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.516113][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.524243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 595.532769][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 595.541203][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 595.549986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 595.558379][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.565468][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.573067][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 595.581651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 595.590162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 595.599052][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 595.607524][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 595.622079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 595.635717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 595.644562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 595.652648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 595.671882][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 595.681095][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 595.689861][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 595.714951][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 595.722840][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 595.731609][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 595.750091][T11997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 595.762160][T11997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.777859][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 595.786708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 595.795615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 595.804128][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 595.812344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 595.836725][T11996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.198937][T11997] 8021q: adding VLAN 0 to HW filter on device batadv0 12:54:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:41 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:41 executing program 0: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 596.825970][ T26] audit: type=1800 audit(1563108881.306:216): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16802 res=0 12:54:41 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:41 executing program 0: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 597.120566][ T26] audit: type=1800 audit(1563108881.596:217): pid=12057 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16821 res=0 12:54:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:41 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 597.466699][ T26] audit: type=1800 audit(1563108881.946:218): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16820 res=0 12:54:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:42 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 598.516329][T12088] IPVS: ftp: loaded support on port[0] = 21 [ 598.757616][T12088] chnl_net:caif_netlink_parms(): no params data found [ 598.956738][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.964818][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.973896][T12088] device bridge_slave_0 entered promiscuous mode [ 598.982081][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.989407][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.997532][T12088] device bridge_slave_1 entered promiscuous mode [ 599.197110][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.208872][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.230387][T11113] device bridge_slave_1 left promiscuous mode [ 599.237396][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.285190][T11113] device bridge_slave_0 left promiscuous mode [ 599.291455][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.345799][T11113] device bridge_slave_1 left promiscuous mode [ 599.352015][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.394553][T11113] device bridge_slave_0 left promiscuous mode [ 599.400691][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.254303][T11113] device hsr_slave_0 left promiscuous mode [ 603.293837][T11113] device hsr_slave_1 left promiscuous mode [ 603.363826][T11113] team0 (unregistering): Port device team_slave_1 removed [ 603.375888][T11113] team0 (unregistering): Port device team_slave_0 removed [ 603.387898][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.429762][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.528157][T11113] bond0 (unregistering): Released all slaves [ 603.704380][T11113] device hsr_slave_0 left promiscuous mode [ 603.743709][T11113] device hsr_slave_1 left promiscuous mode [ 603.796452][T11113] team0 (unregistering): Port device team_slave_1 removed [ 603.809923][T11113] team0 (unregistering): Port device team_slave_0 removed [ 603.821443][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.867405][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.955318][T11113] bond0 (unregistering): Released all slaves [ 604.078031][T12088] team0: Port device team_slave_0 added [ 604.085735][T12088] team0: Port device team_slave_1 added [ 604.146492][T12088] device hsr_slave_0 entered promiscuous mode [ 604.183841][T12088] device hsr_slave_1 entered promiscuous mode [ 604.279265][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.293207][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 604.301801][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 604.435338][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.447653][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 604.457040][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.465813][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.472889][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.492172][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 604.500503][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 604.509943][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 604.519495][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.526602][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.535082][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 604.552375][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 604.582204][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 604.591125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 604.608439][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 604.621872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 604.632927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.647701][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 604.659270][T12088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 604.667651][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 604.690629][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.953696][T12096] EXT4-fs (sda1): re-mounted. Opts: 12:54:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:49 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:49 executing program 0: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:54:49 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:49 executing program 1: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 605.088947][ T26] audit: type=1800 audit(1563108889.566:219): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16837 res=0 12:54:49 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:49 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 605.325045][ T26] audit: type=1800 audit(1563108889.806:220): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16813 res=0 12:54:49 executing program 0: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:54:49 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:50 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 605.636576][ T26] audit: type=1800 audit(1563108890.116:221): pid=12127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16841 res=0 12:54:50 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 605.868675][ T26] audit: type=1800 audit(1563108890.346:222): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16832 res=0 12:54:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:50 executing program 1: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:50 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:50 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:50 executing program 0: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 606.306280][ T26] audit: type=1800 audit(1563108890.776:223): pid=12148 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16843 res=0 [ 606.911038][T12165] IPVS: ftp: loaded support on port[0] = 21 [ 607.029153][T12165] chnl_net:caif_netlink_parms(): no params data found [ 607.063405][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.070920][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.078905][T12165] device bridge_slave_0 entered promiscuous mode [ 607.086880][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.094216][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.101814][T12165] device bridge_slave_1 entered promiscuous mode [ 607.120992][T12165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.132304][T12165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.155775][T12165] team0: Port device team_slave_0 added [ 607.162956][T12165] team0: Port device team_slave_1 added [ 607.216233][T12165] device hsr_slave_0 entered promiscuous mode [ 607.253888][T12165] device hsr_slave_1 entered promiscuous mode [ 607.344238][T12165] debugfs: Directory 'hsr0' with parent '/' already present! [ 607.429249][T12165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.450442][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 607.462550][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 607.480795][T12165] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.491828][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 607.501013][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 607.509754][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.516906][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.534631][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 607.542736][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 607.551585][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 607.560300][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.567407][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.576341][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 607.585583][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 607.605038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 607.613942][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 607.622435][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 607.631270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 607.640202][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 607.649298][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 607.668285][T12165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.680070][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 607.689447][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 607.697962][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 607.706947][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 607.734175][T12165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.840840][T12173] EXT4-fs (sda1): re-mounted. Opts: 12:54:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:52 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:52 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:54:52 executing program 1: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 608.011845][ T26] audit: type=1800 audit(1563108892.486:224): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16860 res=0 12:54:52 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:54:52 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:54:52 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 608.289380][ T26] audit: type=1800 audit(1563108892.766:225): pid=12198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16705 res=0 12:54:52 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:54:52 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 608.512866][ T26] audit: type=1800 audit(1563108892.986:226): pid=12207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16822 res=0 12:54:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:54:53 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 608.945278][ T26] audit: type=1800 audit(1563108893.426:227): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16851 res=0 [ 609.880371][T12226] IPVS: ftp: loaded support on port[0] = 21 [ 610.461346][T12226] chnl_net:caif_netlink_parms(): no params data found [ 610.748012][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.756404][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.764792][T12226] device bridge_slave_0 entered promiscuous mode [ 610.772755][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.780088][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.788447][T12226] device bridge_slave_1 entered promiscuous mode [ 611.021419][T12226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.032163][T12226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.052923][T12226] team0: Port device team_slave_0 added [ 611.060702][T12226] team0: Port device team_slave_1 added [ 611.136488][T12226] device hsr_slave_0 entered promiscuous mode [ 611.173827][T12226] device hsr_slave_1 entered promiscuous mode [ 611.213735][T12226] debugfs: Directory 'hsr0' with parent '/' already present! [ 611.708003][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.719132][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 611.727558][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.951885][T12226] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.963932][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 611.972811][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.981428][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.988567][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.997475][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 612.239084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.247898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.257616][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.264747][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.272646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 612.282582][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 612.291170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.300035][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.309120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 612.317784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 612.330755][T11113] device bridge_slave_1 left promiscuous mode [ 612.341285][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.374265][T11113] device bridge_slave_0 left promiscuous mode [ 612.380415][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.454729][T11113] device bridge_slave_1 left promiscuous mode [ 612.460879][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.534415][T11113] device bridge_slave_0 left promiscuous mode [ 612.540583][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.585651][T11113] device bridge_slave_1 left promiscuous mode [ 612.591843][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.624758][T11113] device bridge_slave_0 left promiscuous mode [ 612.630960][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.064039][T11113] device hsr_slave_0 left promiscuous mode [ 618.103854][T11113] device hsr_slave_1 left promiscuous mode [ 618.153418][T11113] team0 (unregistering): Port device team_slave_1 removed [ 618.166049][T11113] team0 (unregistering): Port device team_slave_0 removed [ 618.177840][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.250124][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.330213][T11113] bond0 (unregistering): Released all slaves [ 618.464561][T11113] device hsr_slave_0 left promiscuous mode [ 618.523850][T11113] device hsr_slave_1 left promiscuous mode [ 618.574537][T11113] team0 (unregistering): Port device team_slave_1 removed [ 618.587093][T11113] team0 (unregistering): Port device team_slave_0 removed [ 618.598550][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.648167][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.739786][T11113] bond0 (unregistering): Released all slaves [ 618.914234][T11113] device hsr_slave_0 left promiscuous mode [ 618.963777][T11113] device hsr_slave_1 left promiscuous mode [ 619.035654][T11113] team0 (unregistering): Port device team_slave_1 removed [ 619.048309][T11113] team0 (unregistering): Port device team_slave_0 removed [ 619.059362][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.110245][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.183385][T11113] bond0 (unregistering): Released all slaves [ 619.278095][T12226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 619.289610][T12226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.302352][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.310279][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.318847][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.327477][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.336163][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.355790][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.367824][T12226] 8021q: adding VLAN 0 to HW filter on device batadv0 12:55:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:04 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 619.569989][T12234] EXT4-fs (sda1): re-mounted. Opts: [ 619.704364][ T26] audit: type=1800 audit(1563108904.186:228): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16847 res=0 12:55:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:04 executing program 1: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 620.011205][ T26] audit: type=1800 audit(1563108904.466:229): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16867 res=0 12:55:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 620.234394][ T26] audit: type=1800 audit(1563108904.716:230): pid=12273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 12:55:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 620.495433][ T26] audit: type=1800 audit(1563108904.976:231): pid=12283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16593 res=0 12:55:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:05 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 621.500328][T12311] IPVS: ftp: loaded support on port[0] = 21 [ 621.682628][T12311] chnl_net:caif_netlink_parms(): no params data found [ 621.739477][T12311] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.746765][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.755672][T12311] device bridge_slave_0 entered promiscuous mode [ 621.763609][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.770731][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.778785][T12311] device bridge_slave_1 entered promiscuous mode [ 621.799702][T12311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.811206][T12311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.839552][T12311] team0: Port device team_slave_0 added [ 621.847196][T12311] team0: Port device team_slave_1 added [ 621.926486][T12311] device hsr_slave_0 entered promiscuous mode [ 621.963922][T12311] device hsr_slave_1 entered promiscuous mode [ 622.070777][T12311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.097505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.113297][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.131736][T12311] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.145881][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.161696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.171069][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.178176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.195983][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.210750][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.219736][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.237071][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.244211][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.274877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.285154][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.294566][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.312183][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.321896][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.337552][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.349959][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.362041][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.377547][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 622.386305][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.398119][T12311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.407076][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.439765][T12311] 8021q: adding VLAN 0 to HW filter on device batadv0 12:55:07 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:07 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 622.863457][ T26] audit: type=1800 audit(1563108907.336:232): pid=12329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16875 res=0 12:55:07 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:07 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:07 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 623.142801][ T26] audit: type=1800 audit(1563108907.616:233): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16864 res=0 12:55:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:07 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:07 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 623.521108][ T26] audit: type=1800 audit(1563108907.996:234): pid=12369 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16886 res=0 12:55:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 624.706778][T12386] IPVS: ftp: loaded support on port[0] = 21 [ 624.959727][T12386] chnl_net:caif_netlink_parms(): no params data found [ 624.986918][T12386] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.994315][T12386] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.001963][T12386] device bridge_slave_0 entered promiscuous mode [ 625.089622][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.097058][T12386] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.105779][T12386] device bridge_slave_1 entered promiscuous mode [ 625.198075][T12386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.209934][T12386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.229905][T12386] team0: Port device team_slave_0 added [ 625.237112][T12386] team0: Port device team_slave_1 added [ 625.243081][T11113] device bridge_slave_1 left promiscuous mode [ 625.249719][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.295603][T11113] device bridge_slave_0 left promiscuous mode [ 625.301866][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.224118][T11113] device hsr_slave_0 left promiscuous mode [ 627.263781][T11113] device hsr_slave_1 left promiscuous mode [ 627.330273][T11113] team0 (unregistering): Port device team_slave_1 removed [ 627.343971][T11113] team0 (unregistering): Port device team_slave_0 removed [ 627.355633][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.398234][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.470828][T11113] bond0 (unregistering): Released all slaves [ 627.656539][T12386] device hsr_slave_0 entered promiscuous mode [ 627.704008][T12386] device hsr_slave_1 entered promiscuous mode [ 627.763660][T12386] debugfs: Directory 'hsr0' with parent '/' already present! [ 627.811742][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.825778][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 627.835039][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 627.845860][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.856120][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 627.865274][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.873887][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.880934][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.920276][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 627.931495][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.940531][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.949606][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.956725][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.965580][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 627.986585][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 627.996891][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 628.013009][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 628.022923][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 628.040073][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 628.051507][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.069682][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.085750][T12386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.104941][T12386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 628.121515][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 628.130751][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.149929][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.192179][T12386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.444558][T12394] EXT4-fs (sda1): re-mounted. Opts: 12:55:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:12 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:12 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 628.554026][ T26] audit: type=1800 audit(1563108913.036:235): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16895 res=0 12:55:13 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:13 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 628.898102][ T26] audit: type=1800 audit(1563108913.376:236): pid=12420 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16894 res=0 12:55:13 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:13 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:13 executing program 3: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 629.174941][ T26] audit: type=1800 audit(1563108913.656:237): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16901 res=0 12:55:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:14 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:14 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 629.767734][ T26] audit: type=1800 audit(1563108914.246:238): pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16911 res=0 [ 629.813848][T12451] EXT4-fs (sda1): re-mounted. Opts: [ 630.362646][T12459] IPVS: ftp: loaded support on port[0] = 21 [ 630.444386][T12459] chnl_net:caif_netlink_parms(): no params data found [ 630.473256][T12459] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.480535][T12459] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.489747][T12459] device bridge_slave_0 entered promiscuous mode [ 630.500367][T12459] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.507589][T12459] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.515693][T12459] device bridge_slave_1 entered promiscuous mode [ 630.537120][T12459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.548991][T12459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.571986][T12459] team0: Port device team_slave_0 added [ 630.579556][T12459] team0: Port device team_slave_1 added [ 630.656479][T12459] device hsr_slave_0 entered promiscuous mode [ 630.693880][T12459] device hsr_slave_1 entered promiscuous mode [ 630.763722][T12459] debugfs: Directory 'hsr0' with parent '/' already present! [ 630.825025][T12459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.838412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 630.847205][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 630.858207][T12459] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.868551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 630.877533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 630.886131][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.893177][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.901751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 630.912852][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 630.922243][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 630.930894][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.938017][T11171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.964050][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 630.972987][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 630.982251][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 630.991156][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 630.999797][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 631.008386][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 631.017060][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 631.025618][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 631.033910][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 631.042412][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 631.489876][T12459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 631.498654][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 631.754778][T12459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.076123][T12467] EXT4-fs (sda1): re-mounted. Opts: 12:55:16 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:16 executing program 3: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:16 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:16 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:16 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 632.195607][ T26] audit: type=1800 audit(1563108916.676:239): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16483 res=0 12:55:16 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:16 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:16 executing program 3: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 632.436942][ T26] audit: type=1800 audit(1563108916.916:240): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16893 res=0 12:55:17 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:17 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 632.628023][ T26] audit: type=1800 audit(1563108917.106:241): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16927 res=0 [ 632.816804][ T26] audit: type=1800 audit(1563108917.296:242): pid=12502 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16924 res=0 12:55:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:17 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:17 executing program 3: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:17 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 633.440930][ T26] audit: type=1800 audit(1563108917.916:243): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16927 res=0 [ 633.838612][T12520] IPVS: ftp: loaded support on port[0] = 21 [ 634.196158][T12522] IPVS: ftp: loaded support on port[0] = 21 [ 634.209893][T12520] chnl_net:caif_netlink_parms(): no params data found [ 634.515795][T12520] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.522965][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.530745][T12520] device bridge_slave_0 entered promiscuous mode [ 634.818980][T12520] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.826682][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.834926][T12520] device bridge_slave_1 entered promiscuous mode [ 634.858977][T12520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.871716][T12520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.897611][T12520] team0: Port device team_slave_0 added [ 634.907640][T12520] team0: Port device team_slave_1 added [ 634.918950][T11113] device bridge_slave_1 left promiscuous mode [ 634.925593][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.964700][T11113] device bridge_slave_0 left promiscuous mode [ 634.970927][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.015178][T11113] device bridge_slave_1 left promiscuous mode [ 635.021358][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.064941][T11113] device bridge_slave_0 left promiscuous mode [ 635.071139][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.134938][T11113] device bridge_slave_1 left promiscuous mode [ 635.141164][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.174435][T11113] device bridge_slave_0 left promiscuous mode [ 635.180611][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.594169][T11113] device hsr_slave_0 left promiscuous mode [ 640.633715][T11113] device hsr_slave_1 left promiscuous mode [ 640.680276][T11113] team0 (unregistering): Port device team_slave_1 removed [ 640.693158][T11113] team0 (unregistering): Port device team_slave_0 removed [ 640.704291][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.778517][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.868943][T11113] bond0 (unregistering): Released all slaves [ 640.984460][T11113] device hsr_slave_0 left promiscuous mode [ 641.053652][T11113] device hsr_slave_1 left promiscuous mode [ 641.115112][T11113] team0 (unregistering): Port device team_slave_1 removed [ 641.127053][T11113] team0 (unregistering): Port device team_slave_0 removed [ 641.138307][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.189539][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.288227][T11113] bond0 (unregistering): Released all slaves [ 641.444373][T11113] device hsr_slave_0 left promiscuous mode [ 641.493765][T11113] device hsr_slave_1 left promiscuous mode [ 641.562321][T11113] team0 (unregistering): Port device team_slave_1 removed [ 641.575688][T11113] team0 (unregistering): Port device team_slave_0 removed [ 641.587301][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.657273][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.741725][T11113] bond0 (unregistering): Released all slaves [ 641.956507][T12520] device hsr_slave_0 entered promiscuous mode [ 642.004015][T12520] device hsr_slave_1 entered promiscuous mode [ 642.073674][T12520] debugfs: Directory 'hsr0' with parent '/' already present! [ 642.087984][T12522] chnl_net:caif_netlink_parms(): no params data found [ 642.131724][T12522] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.139179][T12522] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.147012][T12522] device bridge_slave_0 entered promiscuous mode [ 642.155551][T12522] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.162625][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.170751][T12522] device bridge_slave_1 entered promiscuous mode [ 642.202510][T12522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.215374][T12522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.243952][T12522] team0: Port device team_slave_0 added [ 642.252161][T12522] team0: Port device team_slave_1 added [ 642.297802][T12522] device hsr_slave_0 entered promiscuous mode [ 642.354950][T12522] device hsr_slave_1 entered promiscuous mode [ 642.393777][T12522] debugfs: Directory 'hsr0' with parent '/' already present! [ 642.432565][T12522] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.439635][T12522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.447024][T12522] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.454099][T12522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.556977][T12520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.642553][T12520] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.651950][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.660061][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.671011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 642.679585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 642.705123][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 642.714683][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 642.723322][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.730465][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.739478][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 642.750229][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 642.759007][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.766128][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.774537][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 642.791252][T12522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.801797][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 642.811978][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 642.844756][T12522] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.859196][T12520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.870799][T12520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.887185][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 642.897523][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 642.907413][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 642.926662][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 642.941766][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 642.952152][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 642.972309][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.011790][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 643.022116][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.037802][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.051019][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.063341][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.070486][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.085790][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 643.099184][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 643.118428][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.125569][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.163801][T12520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.172314][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 643.199801][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 643.220803][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 643.232920][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 643.251455][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 643.263144][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 643.283153][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 643.312204][T12522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 643.329912][T12522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.355304][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 643.370912][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.383114][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 643.401880][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.422554][T12522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.434424][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.521239][T12532] EXT4-fs (sda1): re-mounted. Opts: 12:55:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 643.785292][T12542] EXT4-fs (sda1): re-mounted. Opts: 12:55:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:28 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:28 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:28 executing program 3: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:28 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:28 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 643.965628][ T26] audit: type=1800 audit(1563108928.446:244): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16913 res=0 [ 644.087868][ T26] audit: type=1800 audit(1563108928.566:245): pid=12556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16913 res=0 12:55:28 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:28 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 644.281639][ T26] audit: type=1800 audit(1563108928.756:246): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16938 res=0 12:55:28 executing program 3: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:28 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 644.535945][ T26] audit: type=1800 audit(1563108929.016:247): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16938 res=0 12:55:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:29 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:29 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 645.000958][ T26] audit: type=1800 audit(1563108929.476:248): pid=12584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16938 res=0 [ 645.570319][T12589] IPVS: ftp: loaded support on port[0] = 21 [ 645.738714][T12589] chnl_net:caif_netlink_parms(): no params data found [ 645.772868][T12589] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.780157][T12589] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.788272][T12589] device bridge_slave_0 entered promiscuous mode [ 645.796877][T12589] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.804277][T12589] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.811881][T12589] device bridge_slave_1 entered promiscuous mode [ 645.832261][T12589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.843108][T12589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.862878][T12589] team0: Port device team_slave_0 added [ 645.871230][T12589] team0: Port device team_slave_1 added [ 645.936453][T12589] device hsr_slave_0 entered promiscuous mode [ 645.994064][T12589] device hsr_slave_1 entered promiscuous mode [ 646.023721][T12589] debugfs: Directory 'hsr0' with parent '/' already present! [ 646.050705][T12589] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.057842][T12589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.065253][T12589] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.072316][T12589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.137002][T12589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.150361][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.158923][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.167098][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.180568][T12589] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.192543][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.201071][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.208173][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.220477][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.229871][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.237029][ T8588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.259655][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 646.268120][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 646.281669][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 646.297323][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.310948][T12589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.323258][T12589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.331348][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.350769][T12589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.481627][T12597] EXT4-fs (sda1): re-mounted. Opts: 12:55:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:31 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:31 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 646.592586][ T26] audit: type=1800 audit(1563108931.066:249): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16890 res=0 12:55:31 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:31 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 646.827495][ T26] audit: type=1800 audit(1563108931.306:250): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16935 res=0 12:55:31 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:31 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:31 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 647.074964][ T26] audit: type=1800 audit(1563108931.556:251): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16935 res=0 12:55:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:32 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 648.254170][ T26] audit: type=1800 audit(1563108932.736:252): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16959 res=0 [ 648.661314][T12640] IPVS: ftp: loaded support on port[0] = 21 [ 648.662745][T12648] IPVS: ftp: loaded support on port[0] = 21 [ 649.769375][T12648] chnl_net:caif_netlink_parms(): no params data found [ 649.802850][T12640] chnl_net:caif_netlink_parms(): no params data found [ 650.100903][T12648] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.108434][T12648] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.116386][T12648] device bridge_slave_0 entered promiscuous mode [ 650.136290][T12648] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.143344][T12648] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.151667][T12648] device bridge_slave_1 entered promiscuous mode [ 650.159732][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.167239][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.175712][T12640] device bridge_slave_0 entered promiscuous mode [ 650.449960][T12640] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.457202][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.465752][T12640] device bridge_slave_1 entered promiscuous mode [ 650.476201][T12648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.488202][T12648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.516565][T12648] team0: Port device team_slave_0 added [ 650.530493][T12648] team0: Port device team_slave_1 added [ 650.538788][T11113] device bridge_slave_1 left promiscuous mode [ 650.546112][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.584736][T11113] device bridge_slave_0 left promiscuous mode [ 650.591018][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.645053][T11113] device bridge_slave_1 left promiscuous mode [ 650.651380][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.714686][T11113] device bridge_slave_0 left promiscuous mode [ 650.720894][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.785598][T11113] device bridge_slave_1 left promiscuous mode [ 650.791862][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.834462][T11113] device bridge_slave_0 left promiscuous mode [ 650.840700][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.514275][T11113] device hsr_slave_0 left promiscuous mode [ 656.558609][T11113] device hsr_slave_1 left promiscuous mode [ 656.625000][T11113] team0 (unregistering): Port device team_slave_1 removed [ 656.637181][T11113] team0 (unregistering): Port device team_slave_0 removed [ 656.649741][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.699872][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.775775][T11113] bond0 (unregistering): Released all slaves [ 656.944497][T11113] device hsr_slave_0 left promiscuous mode [ 656.993782][T11113] device hsr_slave_1 left promiscuous mode [ 657.046338][T11113] team0 (unregistering): Port device team_slave_1 removed [ 657.060233][T11113] team0 (unregistering): Port device team_slave_0 removed [ 657.075564][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.131847][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.229821][T11113] bond0 (unregistering): Released all slaves [ 657.384247][T11113] device hsr_slave_0 left promiscuous mode [ 657.423813][T11113] device hsr_slave_1 left promiscuous mode [ 657.482354][T11113] team0 (unregistering): Port device team_slave_1 removed [ 657.496218][T11113] team0 (unregistering): Port device team_slave_0 removed [ 657.509360][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.560803][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.641190][T11113] bond0 (unregistering): Released all slaves [ 657.738514][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.750424][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.825853][T12648] device hsr_slave_0 entered promiscuous mode [ 657.865021][T12648] device hsr_slave_1 entered promiscuous mode [ 657.903718][T12648] debugfs: Directory 'hsr0' with parent '/' already present! [ 657.917280][T12640] team0: Port device team_slave_0 added [ 657.924999][T12640] team0: Port device team_slave_1 added [ 657.986968][T12640] device hsr_slave_0 entered promiscuous mode [ 658.023868][T12640] device hsr_slave_1 entered promiscuous mode [ 658.063896][T12640] debugfs: Directory 'hsr0' with parent '/' already present! [ 658.147550][T12648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.168668][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.177278][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 658.203910][T12648] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.215074][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.223845][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.232101][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.239192][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.247877][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 658.264874][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.274752][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.283183][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.290288][ T8852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.303615][T12640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.310427][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.493695][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.502146][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.517668][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.529988][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.541566][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 658.553242][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.565636][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.588702][T12640] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.604977][T12648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 658.623084][T12648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.645664][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 658.661125][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 658.670359][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 658.685768][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 658.699106][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 658.746020][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 658.759462][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.771415][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.786863][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.794015][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.810145][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.819143][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.834395][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.841484][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.855898][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.869102][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.888910][T12648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.906046][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 658.917062][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.949287][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.989528][T12640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.009400][T12640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.021979][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 659.031121][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 659.039925][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.049068][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.057983][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.078733][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 659.097844][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.254142][T12659] EXT4-fs (sda1): re-mounted. Opts: 12:55:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 659.539472][T12668] EXT4-fs (sda1): re-mounted. Opts: 12:55:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:44 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:44 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 659.702088][ T26] audit: type=1800 audit(1563108944.176:253): pid=12676 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16705 res=0 12:55:44 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:44 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 659.925074][ T26] audit: type=1800 audit(1563108944.406:254): pid=12690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16705 res=0 12:55:44 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:44 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:44 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 660.137549][ T26] audit: type=1800 audit(1563108944.616:255): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16737 res=0 12:55:45 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 660.691836][ T26] audit: type=1800 audit(1563108945.166:256): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16801 res=0 [ 661.362378][T12722] IPVS: ftp: loaded support on port[0] = 21 [ 661.466341][T12722] chnl_net:caif_netlink_parms(): no params data found [ 661.523638][T12722] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.530787][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.539004][T12722] device bridge_slave_0 entered promiscuous mode [ 661.551453][T12722] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.562503][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.577434][T12722] device bridge_slave_1 entered promiscuous mode [ 661.610726][T12722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.628754][T12722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.661427][T12722] team0: Port device team_slave_0 added [ 661.677871][T12722] team0: Port device team_slave_1 added [ 661.746403][T12722] device hsr_slave_0 entered promiscuous mode [ 661.783960][T12722] device hsr_slave_1 entered promiscuous mode [ 661.833607][T12722] debugfs: Directory 'hsr0' with parent '/' already present! [ 661.882104][T12722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.896197][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.906013][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.916241][T12722] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.925708][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 661.934530][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.942755][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.949883][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.958360][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 661.969706][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 661.980504][ T8589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.989619][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.996725][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.014081][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.022726][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.032607][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.042011][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.069531][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.078352][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.087476][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.097064][ T8400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.112886][T12722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.129344][T12722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 662.137550][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.210675][T12722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.225742][T12725] IPVS: ftp: loaded support on port[0] = 21 [ 662.385263][T12725] chnl_net:caif_netlink_parms(): no params data found [ 662.426306][T12733] EXT4-fs (sda1): re-mounted. Opts: 12:55:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:47 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:47 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 662.580803][ T26] audit: type=1800 audit(1563108947.056:257): pid=12743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16950 res=0 12:55:47 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:47 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 662.654487][T12741] EXT4-fs (sda1): re-mounted. Opts: 12:55:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 662.805074][ T26] audit: type=1800 audit(1563108947.286:258): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16967 res=0 12:55:47 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:47 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 662.995701][ T26] audit: type=1800 audit(1563108947.476:259): pid=12759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16966 res=0 [ 663.899633][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.907141][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.915885][T12725] device bridge_slave_0 entered promiscuous mode [ 663.924761][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.931831][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.947444][T12725] device bridge_slave_1 entered promiscuous mode [ 664.291137][T12725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.302554][T12725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.324446][T12763] IPVS: ftp: loaded support on port[0] = 21 [ 664.578523][T12725] team0: Port device team_slave_0 added [ 664.586024][T12725] team0: Port device team_slave_1 added [ 664.905890][T12725] device hsr_slave_0 entered promiscuous mode [ 664.945085][T12725] device hsr_slave_1 entered promiscuous mode [ 664.983834][T12725] debugfs: Directory 'hsr0' with parent '/' already present! [ 665.272289][T12763] chnl_net:caif_netlink_parms(): no params data found [ 665.591151][T12763] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.598504][T12763] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.607494][T12763] device bridge_slave_0 entered promiscuous mode [ 665.871407][T12763] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.879649][T12763] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.887759][T12763] device bridge_slave_1 entered promiscuous mode [ 665.910756][T12763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.152852][T12763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.177767][T12763] team0: Port device team_slave_0 added [ 666.185316][T12763] team0: Port device team_slave_1 added [ 666.476845][T12763] device hsr_slave_0 entered promiscuous mode [ 666.513929][T12763] device hsr_slave_1 entered promiscuous mode [ 666.573610][T12763] debugfs: Directory 'hsr0' with parent '/' already present! [ 666.592033][T11113] device bridge_slave_1 left promiscuous mode [ 666.598564][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.645889][T11113] device bridge_slave_0 left promiscuous mode [ 666.652108][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.714750][T11113] device bridge_slave_1 left promiscuous mode [ 666.720903][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.764846][T11113] device bridge_slave_0 left promiscuous mode [ 666.771079][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.815222][T11113] device bridge_slave_1 left promiscuous mode [ 666.821373][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.864986][T11113] device bridge_slave_0 left promiscuous mode [ 666.871215][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.444266][T11113] device hsr_slave_0 left promiscuous mode [ 672.483828][T11113] device hsr_slave_1 left promiscuous mode [ 672.560262][T11113] team0 (unregistering): Port device team_slave_1 removed [ 672.575302][T11113] team0 (unregistering): Port device team_slave_0 removed [ 672.587490][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.639450][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.730286][T11113] bond0 (unregistering): Released all slaves [ 672.864038][T11113] device hsr_slave_0 left promiscuous mode [ 672.903753][T11113] device hsr_slave_1 left promiscuous mode [ 672.965998][T11113] team0 (unregistering): Port device team_slave_1 removed [ 672.977471][T11113] team0 (unregistering): Port device team_slave_0 removed [ 672.994268][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.028492][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.131790][T11113] bond0 (unregistering): Released all slaves [ 673.254466][T11113] device hsr_slave_0 left promiscuous mode [ 673.293860][T11113] device hsr_slave_1 left promiscuous mode [ 673.366150][T11113] team0 (unregistering): Port device team_slave_1 removed [ 673.378753][T11113] team0 (unregistering): Port device team_slave_0 removed [ 673.389938][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.439984][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.535260][T11113] bond0 (unregistering): Released all slaves [ 673.643298][T12725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.664029][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 673.671860][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 673.683429][T12725] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.709703][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 673.718786][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.727903][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.735025][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.743445][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 673.762880][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 673.772850][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.781788][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.788906][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.809486][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 673.819223][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 673.851077][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 673.861612][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.870107][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 673.879041][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.887748][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.896256][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.909276][T12763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.921979][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 673.930833][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 673.939836][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 673.952008][T12725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.981825][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 673.995126][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.006660][T12763] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.117815][T12725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.163626][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.172360][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.181579][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.188698][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.196726][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.205500][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.214142][ T2842] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.221207][ T2842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.229516][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 674.251077][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 674.281018][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 674.306121][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 674.330512][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 674.370961][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 674.381173][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 674.398269][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 674.442179][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 674.454741][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.463407][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 674.472793][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 674.482824][T12763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 674.510777][T12771] EXT4-fs (sda1): re-mounted. Opts: [ 674.546735][T12763] 8021q: adding VLAN 0 to HW filter on device batadv0 12:55:59 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:55:59 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:55:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:55:59 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:55:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 674.685889][ T26] audit: type=1800 audit(1563108959.166:260): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16485 res=0 [ 675.411523][T12788] EXT4-fs (sda1): re-mounted. Opts: 12:56:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:00 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:00 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:56:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 675.548741][ T26] audit: type=1800 audit(1563108960.026:261): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16513 res=0 12:56:00 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:56:00 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:00 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 675.766213][ T26] audit: type=1800 audit(1563108960.246:262): pid=12802 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16974 res=0 12:56:00 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:00 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 675.961036][ T26] audit: type=1800 audit(1563108960.436:263): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16960 res=0 [ 676.409136][T12817] IPVS: ftp: loaded support on port[0] = 21 [ 676.427360][T12818] IPVS: ftp: loaded support on port[0] = 21 [ 676.572599][T12817] chnl_net:caif_netlink_parms(): no params data found [ 676.619809][T12817] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.627481][T12817] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.636165][T12817] device bridge_slave_0 entered promiscuous mode [ 676.646177][T12817] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.653446][T12817] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.661560][T12817] device bridge_slave_1 entered promiscuous mode [ 676.683360][T12817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.713375][T12817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.784796][T12817] team0: Port device team_slave_0 added [ 676.792030][T12817] team0: Port device team_slave_1 added [ 676.811450][T12818] chnl_net:caif_netlink_parms(): no params data found [ 676.856058][T12818] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.863218][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.871514][T12818] device bridge_slave_0 entered promiscuous mode [ 676.886000][T12818] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.893077][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.901952][T12818] device bridge_slave_1 entered promiscuous mode [ 676.956250][T12817] device hsr_slave_0 entered promiscuous mode [ 676.993913][T12817] device hsr_slave_1 entered promiscuous mode [ 677.034637][T12817] debugfs: Directory 'hsr0' with parent '/' already present! [ 677.066490][T12818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.112123][T12818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.149528][T12822] IPVS: ftp: loaded support on port[0] = 21 [ 677.176339][T12818] team0: Port device team_slave_0 added [ 677.193206][T12818] team0: Port device team_slave_1 added [ 677.356483][T12818] device hsr_slave_0 entered promiscuous mode [ 677.394022][T12818] device hsr_slave_1 entered promiscuous mode [ 677.443755][T12818] debugfs: Directory 'hsr0' with parent '/' already present! [ 677.454581][T12817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.506729][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 677.515079][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 677.533960][T12817] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.559165][T12822] chnl_net:caif_netlink_parms(): no params data found [ 677.602579][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.612241][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.621436][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.628601][ T8588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.637004][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.645888][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.654479][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.661554][ T8588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.688844][T12818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.706876][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.716041][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.734726][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 677.756034][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 677.782787][T12822] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.790923][T12822] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.799076][T12822] device bridge_slave_0 entered promiscuous mode [ 677.808316][T12822] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.815631][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.823315][T12822] device bridge_slave_1 entered promiscuous mode [ 677.832143][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.860935][T12818] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.869392][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 677.878353][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 677.887132][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 677.896318][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 677.904946][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 677.912847][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 677.930806][T12817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.943757][T12817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 677.953362][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 677.962286][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 677.973423][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.982289][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.990777][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.997841][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.005578][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 678.014905][ T8853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 678.023262][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.030384][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.039996][T12822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.053936][T12822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.084750][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 678.092556][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 678.101596][ T8409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 678.115956][T12817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.142800][T12822] team0: Port device team_slave_0 added [ 678.151144][T12822] team0: Port device team_slave_1 added [ 678.166898][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 678.181360][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 678.190305][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 678.202048][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 678.210712][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 678.219113][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 678.227675][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 678.236212][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 678.246859][ T8403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 678.256157][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 678.326015][T12822] device hsr_slave_0 entered promiscuous mode [ 678.354366][T12822] device hsr_slave_1 entered promiscuous mode [ 678.394030][T12822] debugfs: Directory 'hsr0' with parent '/' already present! [ 678.567990][T12833] EXT4-fs (sda1): re-mounted. Opts: 12:56:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:56:03 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 678.701558][ T26] audit: type=1800 audit(1563108963.176:264): pid=12838 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16994 res=0 [ 679.267434][T12818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.035351][T12846] EXT4-fs (sda1): re-mounted. Opts: 12:56:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:04 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) [ 680.176982][ T26] audit: type=1800 audit(1563108964.656:265): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16485 res=0 [ 680.827800][T12822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.209175][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.218267][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.229049][T12822] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.242924][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.254457][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.264613][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.271684][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.678551][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.691353][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.717056][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.735581][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.742626][ T8588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.758667][T12856] IPVS: ftp: loaded support on port[0] = 21 [ 682.054516][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 682.062996][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 682.072699][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 682.081820][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 682.091740][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 682.430444][T12857] IPVS: ftp: loaded support on port[0] = 21 [ 682.432161][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 682.448598][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 682.457272][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 682.467873][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.805520][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 682.814748][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.829448][T12822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.191965][T12822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.232338][ T2556] device bridge_slave_1 left promiscuous mode [ 683.240640][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.294568][ T2556] device bridge_slave_0 left promiscuous mode [ 683.300731][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.354955][ T2556] device bridge_slave_1 left promiscuous mode [ 683.361143][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.415354][ T2556] device bridge_slave_0 left promiscuous mode [ 683.421515][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.475514][ T2556] device bridge_slave_1 left promiscuous mode [ 683.481723][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.534940][ T2556] device bridge_slave_0 left promiscuous mode [ 683.541167][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.595719][ T2556] device bridge_slave_1 left promiscuous mode [ 683.601934][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.654819][ T2556] device bridge_slave_0 left promiscuous mode [ 683.661051][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.184600][ T2556] device hsr_slave_0 left promiscuous mode [ 691.223742][ T2556] device hsr_slave_1 left promiscuous mode [ 691.273020][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 691.287646][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 691.300073][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.351590][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.423464][ T2556] bond0 (unregistering): Released all slaves [ 691.564268][ T2556] device hsr_slave_0 left promiscuous mode [ 691.603759][ T2556] device hsr_slave_1 left promiscuous mode [ 691.651557][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 691.664493][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 691.677386][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.749305][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.833233][ T2556] bond0 (unregistering): Released all slaves [ 691.974422][ T2556] device hsr_slave_0 left promiscuous mode [ 692.023851][ T2556] device hsr_slave_1 left promiscuous mode [ 692.072092][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 692.086393][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 692.097155][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.167806][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.257923][ T2556] bond0 (unregistering): Released all slaves [ 692.444466][ T2556] device hsr_slave_0 left promiscuous mode [ 692.483826][ T2556] device hsr_slave_1 left promiscuous mode [ 692.556278][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 692.569344][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 692.580820][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.640125][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.731343][ T2556] bond0 (unregistering): Released all slaves [ 692.980237][T12857] chnl_net:caif_netlink_parms(): no params data found [ 692.998317][T12856] chnl_net:caif_netlink_parms(): no params data found [ 693.078639][T12857] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.090946][T12857] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.099471][T12857] device bridge_slave_0 entered promiscuous mode [ 693.111802][T12866] EXT4-fs (sda1): re-mounted. Opts: [ 693.130462][T12857] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.140074][T12857] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.150056][T12857] device bridge_slave_1 entered promiscuous mode 12:56:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:17 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:56:17 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 693.193952][T12857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.203295][T12856] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.228244][T12856] bridge0: port 1(bridge_slave_0) entered disabled state 12:56:17 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 693.271885][T12856] device bridge_slave_0 entered promiscuous mode [ 693.278563][ T26] audit: type=1800 audit(1563108977.746:266): pid=12874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16488 res=0 12:56:17 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 693.321891][T12856] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.360725][T12856] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.419457][T12856] device bridge_slave_1 entered promiscuous mode [ 693.434534][ T26] audit: type=1800 audit(1563108977.916:267): pid=12880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16673 res=0 12:56:17 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:56:17 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 693.474366][T12857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.611721][ T26] audit: type=1800 audit(1563108978.086:268): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16753 res=0 [ 693.911381][T12856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.929450][T12856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.939659][T12857] team0: Port device team_slave_0 added [ 693.947622][T12857] team0: Port device team_slave_1 added [ 693.968325][T12856] team0: Port device team_slave_0 added [ 693.988701][T12856] team0: Port device team_slave_1 added [ 694.076207][T12857] device hsr_slave_0 entered promiscuous mode [ 694.133984][T12857] device hsr_slave_1 entered promiscuous mode [ 694.406407][T12856] device hsr_slave_0 entered promiscuous mode [ 694.483991][T12856] device hsr_slave_1 entered promiscuous mode [ 694.563635][T12856] debugfs: Directory 'hsr0' with parent '/' already present! [ 694.738022][T12857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.762925][T12856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.789858][T12857] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.810888][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 694.848573][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 694.860547][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 694.910228][T12890] IPVS: ftp: loaded support on port[0] = 21 [ 694.910312][T12856] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.936522][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 694.954423][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 694.963464][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.970607][T11171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.987341][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 695.001473][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 695.020122][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.027276][T11171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.046358][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 695.061430][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 695.073483][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 695.090314][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 695.111062][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 695.152624][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 695.163432][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 695.172560][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.179695][ T8588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.192267][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 695.211964][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 695.228952][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 695.238469][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 695.247268][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.255827][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.288975][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 695.298077][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.306818][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 695.316277][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 695.326502][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.333654][T11171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.348966][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 695.360306][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 695.373454][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.383228][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.402421][T12857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.421762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 695.432130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 695.440911][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.461560][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 695.471762][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 695.488148][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.497223][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.506140][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.515195][T11171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.529972][T12857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.555429][T12856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.645692][T12856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.714845][T12890] chnl_net:caif_netlink_parms(): no params data found [ 695.781010][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.803314][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.822597][T12890] device bridge_slave_0 entered promiscuous mode [ 695.861493][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.893078][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.928677][T12890] device bridge_slave_1 entered promiscuous mode [ 695.970387][T12900] EXT4-fs (sda1): re-mounted. Opts: [ 696.060622][T12890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.119162][T12890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.235758][T12908] EXT4-fs (sda1): re-mounted. Opts: 12:56:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:20 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:56:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:56:20 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 696.456069][ T26] audit: type=1800 audit(1563108980.936:269): pid=12917 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16561 res=0 12:56:21 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) [ 696.640584][ T26] audit: type=1800 audit(1563108981.116:270): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17001 res=0 [ 697.285549][T12890] team0: Port device team_slave_0 added [ 697.306521][T12890] team0: Port device team_slave_1 added [ 697.376370][T12890] device hsr_slave_0 entered promiscuous mode [ 697.416961][T12890] device hsr_slave_1 entered promiscuous mode [ 697.453669][T12890] debugfs: Directory 'hsr0' with parent '/' already present! [ 697.503460][T12890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.528429][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 697.545486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.564025][T12890] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.583924][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.592690][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.602408][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.609522][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.618214][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.644423][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.653003][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.662950][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.670067][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.677957][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.687959][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.697367][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 697.706220][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.722374][T12890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 697.734047][T12890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.746989][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 697.755481][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 697.764357][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.775638][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 697.784486][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 697.799903][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 697.817884][T12890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.910163][T12930] IPVS: ftp: loaded support on port[0] = 21 [ 698.053368][T12930] chnl_net:caif_netlink_parms(): no params data found [ 698.066973][T12936] EXT4-fs (sda1): re-mounted. Opts: [ 698.112939][T12930] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.120390][T12930] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.128559][T12930] device bridge_slave_0 entered promiscuous mode [ 698.136720][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.144975][T12930] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.152794][T12930] device bridge_slave_1 entered promiscuous mode 12:56:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:22 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:56:22 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000900)=0x10000) 12:56:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:22 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 698.300480][ T26] audit: type=1800 audit(1563108982.776:271): pid=12944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16881 res=0 12:56:22 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:23 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 698.480765][ T26] audit: type=1800 audit(1563108982.956:272): pid=12948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16865 res=0 [ 699.704788][T12930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.220414][T12930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.242753][T12959] IPVS: ftp: loaded support on port[0] = 21 [ 700.252164][T12957] IPVS: ftp: loaded support on port[0] = 21 [ 700.286787][T12930] team0: Port device team_slave_0 added [ 700.720985][T12930] team0: Port device team_slave_1 added [ 700.806461][T12930] device hsr_slave_0 entered promiscuous mode [ 700.844798][T12930] device hsr_slave_1 entered promiscuous mode [ 700.893636][T12930] debugfs: Directory 'hsr0' with parent '/' already present! [ 702.285594][T12959] chnl_net:caif_netlink_parms(): no params data found [ 702.298074][T12957] chnl_net:caif_netlink_parms(): no params data found [ 702.312049][T12930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.848799][T12959] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.857575][T12959] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.866221][T12959] device bridge_slave_0 entered promiscuous mode [ 702.874461][T12959] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.881567][T12959] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.890123][T12959] device bridge_slave_1 entered promiscuous mode [ 702.898578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 702.906832][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 702.915095][T12957] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.922300][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.930829][T12957] device bridge_slave_0 entered promiscuous mode [ 702.939613][T12957] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.947041][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.955480][T12957] device bridge_slave_1 entered promiscuous mode [ 702.970107][T12930] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.000914][T12959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.015924][T12957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.500152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 703.509143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 703.517689][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.524806][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.535367][T12959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.552685][T12957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.570627][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 703.588781][T11299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 703.597545][T11299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 703.607994][T11299] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.615118][T11299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.622977][T11299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 704.105615][T12957] team0: Port device team_slave_0 added [ 704.113356][T12959] team0: Port device team_slave_0 added [ 704.124796][T12957] team0: Port device team_slave_1 added [ 704.133749][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 704.143425][T12959] team0: Port device team_slave_1 added [ 704.155101][T11300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 704.164561][T11300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 704.180060][T11300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 704.209584][T12930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.220057][T12930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.232112][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 704.241264][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 704.250067][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 704.258674][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 704.267764][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 704.276707][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 704.298264][ T2556] device bridge_slave_1 left promiscuous mode [ 704.306001][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.364713][ T2556] device bridge_slave_0 left promiscuous mode [ 704.370940][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.426319][ T2556] device bridge_slave_1 left promiscuous mode [ 704.432507][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.494420][ T2556] device bridge_slave_0 left promiscuous mode [ 704.500622][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.575179][ T2556] device bridge_slave_1 left promiscuous mode [ 704.581323][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.634654][ T2556] device bridge_slave_0 left promiscuous mode [ 704.640847][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.685725][ T2556] device bridge_slave_1 left promiscuous mode [ 704.691993][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.734914][ T2556] device bridge_slave_0 left promiscuous mode [ 704.741123][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.785603][ T2556] device bridge_slave_1 left promiscuous mode [ 704.791867][ T2556] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.844402][ T2556] device bridge_slave_0 left promiscuous mode [ 704.850603][ T2556] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.104424][ T2556] device hsr_slave_0 left promiscuous mode [ 715.154481][ T2556] device hsr_slave_1 left promiscuous mode [ 715.206378][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 715.220185][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 715.232792][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.282523][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.374238][ T2556] bond0 (unregistering): Released all slaves [ 715.494288][ T2556] device hsr_slave_0 left promiscuous mode [ 715.543981][ T2556] device hsr_slave_1 left promiscuous mode [ 715.597621][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 715.610624][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 715.623240][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.679913][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.770218][ T2556] bond0 (unregistering): Released all slaves [ 715.944494][ T2556] device hsr_slave_0 left promiscuous mode [ 716.013749][ T2556] device hsr_slave_1 left promiscuous mode [ 716.061337][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 716.077206][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 716.089121][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.129320][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.221916][ T2556] bond0 (unregistering): Released all slaves [ 716.384350][ T2556] device hsr_slave_0 left promiscuous mode [ 716.423941][ T2556] device hsr_slave_1 left promiscuous mode [ 716.472213][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 716.486137][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 716.498601][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.549600][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.641280][ T2556] bond0 (unregistering): Released all slaves [ 716.774276][ T2556] device hsr_slave_0 left promiscuous mode [ 716.813654][ T2556] device hsr_slave_1 left promiscuous mode [ 716.876766][ T2556] team0 (unregistering): Port device team_slave_1 removed [ 716.887837][ T2556] team0 (unregistering): Port device team_slave_0 removed [ 716.900584][ T2556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.961484][ T2556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.081008][ T2556] bond0 (unregistering): Released all slaves [ 717.187173][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 717.235516][T12959] device hsr_slave_0 entered promiscuous mode [ 717.273918][T12959] device hsr_slave_1 entered promiscuous mode [ 717.356082][T12957] device hsr_slave_0 entered promiscuous mode [ 717.393814][T12957] device hsr_slave_1 entered promiscuous mode [ 717.433667][T12957] debugfs: Directory 'hsr0' with parent '/' already present! [ 717.452217][T12930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.643246][T12959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.659631][T12957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.678109][T12968] EXT4-fs (sda1): re-mounted. Opts: [ 717.692197][T12959] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.708942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 717.717083][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 717.725087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 717.734345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 717.751721][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.758838][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.779639][T12957] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.804638][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 717.812485][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 717.831868][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 717.840361][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 12:56:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') 12:56:42 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:42 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) 12:56:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) socket$inet6(0xa, 0x80004, 0xeba) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ec0)={{{@in6=@ipv4, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) llistxattr(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ec0)={{{@in6=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xfffffffffffffe7f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@ipv4={[], [], @empty}}, 0x14) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_open_dev$vcsn(0x0, 0x4, 0x400) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@empty, 0x59}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000b00)=0x67a, &(0x7f0000000b40)=0x1) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff3e8, 0x0, &(0x7f0000000a80), 0x20b0, 0x0) pivot_root(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') [ 717.849283][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 717.888170][ T26] audit: type=1800 audit(1563109002.366:273): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16526 res=0 [ 717.911050][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.918187][T12825] bridge0: port 2(bridge_slave_1) entered forwarding state 12:56:42 executing program 4: socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x4140, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r0, 0x0, r1) 12:56:42 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 717.966427][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 718.011918][T12825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 718.040883][ T26] audit: type=1800 audit(1563109002.516:274): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16524 res=0 12:56:42 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e8, 0x0) [ 718.421350][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 718.430257][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 718.438701][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.445813][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.455576][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 718.466149][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 718.474740][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 718.483222][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.491614][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.498698][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.508050][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 718.516722][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 718.525894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 718.534069][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 718.544478][ T2556] ------------[ cut here ]------------ [ 718.550074][ T2556] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 718.550336][ T2556] WARNING: CPU: 0 PID: 2556 at lib/debugobjects.c:484 debug_check_no_obj_freed+0x464/0x5b0 [ 718.569830][T12930] kobject: 'syz_tun' (00000000b6fc32b9): calling ktype release [ 718.570812][ T2556] Kernel panic - not syncing: panic_on_warn set ... [ 718.570833][ T2556] CPU: 0 PID: 2556 Comm: kworker/u4:4 Not tainted 5.2.0+ #28 [ 718.570840][ T2556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.570960][ T2556] Workqueue: netns cleanup_net [ 718.581798][T12930] kobject: 'syz_tun': free name [ 718.585088][ T2556] Call Trace: [ 718.585208][ T2556] dump_stack+0x1d8/0x2f8 [ 718.585254][ T2556] panic+0x29b/0x7d9 [ 718.585269][ T2556] ? __warn+0x126/0x230 [ 718.631875][ T2556] ? nmi_panic+0x97/0x97 [ 718.636203][ T2556] ? __probe_kernel_read+0x140/0x1a0 [ 718.641581][ T2556] ? is_valid_bugaddr+0x81/0x100 [ 718.646551][ T2556] __warn+0x22f/0x230 [ 718.650536][ T2556] ? debug_check_no_obj_freed+0x464/0x5b0 [ 718.656254][ T2556] report_bug+0x190/0x290 [ 718.660574][ T2556] ? debug_check_no_obj_freed+0x464/0x5b0 [ 718.666285][ T2556] do_error_trap+0xd7/0x440 [ 718.670779][ T2556] do_invalid_op+0x36/0x40 [ 718.675184][ T2556] ? debug_check_no_obj_freed+0x464/0x5b0 [ 718.680928][ T2556] invalid_op+0x14/0x20 [ 718.685079][ T2556] RIP: 0010:debug_check_no_obj_freed+0x464/0x5b0 [ 718.691393][ T2556] Code: 08 48 89 df e8 1d b7 4a fe 4c 8b 03 48 c7 c7 1a 90 87 88 48 c7 c6 04 e8 9f 88 4c 89 e2 44 89 f9 4d 89 e9 31 c0 e8 8c 7f e1 fd <0f> 0b 4c 8b 6d a8 ff 05 84 78 96 05 49 83 c5 30 4c 89 e8 48 c1 e8 [ 718.711013][ T2556] RSP: 0018:ffff8880a1edf708 EFLAGS: 00010046 [ 718.717076][ T2556] RAX: 467388213ad62400 RBX: ffffffff88cd9f40 RCX: ffff8880a1ed0140 [ 718.725047][ T2556] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 718.733013][ T2556] RBP: ffff8880a1edf7a0 R08: ffffffff815ffc14 R09: ffffed1015d440c2 [ 718.740981][ T2556] R10: ffffed1015d440c2 R11: 0000000000000000 R12: ffffffff8893058f [ 718.748949][ T2556] R13: ffffffff814f0010 R14: dffffc0000000000 R15: 0000000000000000 [ 718.756929][ T2556] ? queue_work_node+0x340/0x340 [ 718.761975][ T2556] ? vprintk_emit+0x2d4/0x3a0 [ 718.766657][ T2556] ? debug_check_no_obj_freed+0x464/0x5b0 [ 718.772439][ T2556] ? kvfree+0x47/0x50 [ 718.776442][ T2556] kfree+0x107/0x200 [ 718.780334][ T2556] kvfree+0x47/0x50 [ 718.784186][ T2556] netdev_freemem+0x3e/0x60 [ 718.788717][ T2556] netdev_release+0x79/0xa0 [ 718.793211][ T2556] ? netdev_uevent+0xa0/0xa0 [ 718.797857][ T2556] device_release+0x74/0x1a0 [ 718.802448][ T2556] kobject_cleanup+0x2f7/0x4c0 [ 718.807207][ T2556] kobject_put+0xad/0xe0 [ 718.811444][ T2556] netdev_run_todo+0xc7f/0xe10 [ 718.816207][ T2556] ? netdev_refcnt_read+0x1c0/0x1c0 [ 718.821391][ T2556] ? unregister_netdevice_queue+0x277/0x500 [ 718.827290][ T2556] ? alloc_netdev_mqs+0xe50/0xe50 [ 718.832397][ T2556] ? br_dev_delete+0x10d/0x120 [ 718.837161][ T2556] rtnl_unlock+0xe/0x10 [ 718.841309][ T2556] default_device_exit_batch+0x71c/0x790 [ 718.846941][ T2556] ? default_device_exit+0x260/0x260 [ 718.852287][ T2556] ? wait_woken+0x2c0/0x2c0 [ 718.856795][ T2556] ? rtnl_unlock+0xe/0x10 [ 718.861190][ T2556] ? cfg802154_pernet_exit+0xce/0xe0 [ 718.866472][ T2556] ? default_device_exit+0x260/0x260 [ 718.871751][ T2556] cleanup_net+0x77c/0xb30 [ 718.876162][ T2556] ? ops_free_list+0x360/0x360 [ 718.880973][ T2556] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 718.886691][ T2556] process_one_work+0x83b/0x1150 [ 718.891670][ T2556] ? rescuer_thread+0x1670/0x1670 [ 718.896682][ T2556] ? worker_thread+0x10de/0x1640 [ 718.901615][ T2556] worker_thread+0xc01/0x1640 [ 718.906358][ T2556] kthread+0x332/0x350 [ 718.910416][ T2556] ? rcu_lock_release+0x30/0x30 [ 718.915256][ T2556] ? kthread_blkcg+0xe0/0xe0 [ 718.919845][ T2556] ret_from_fork+0x24/0x30 [ 718.925510][ T2556] Kernel Offset: disabled [ 718.929895][ T2556] Rebooting in 86400 seconds..