[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.727360][ T26] audit: type=1800 audit(1571572463.932:25): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.749526][ T26] audit: type=1800 audit(1571572463.942:26): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.770459][ T26] audit: type=1800 audit(1571572463.942:27): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. 2019/10/20 11:54:33 fuzzer started 2019/10/20 11:54:36 dialing manager at 10.128.0.26:46601 2019/10/20 11:54:36 syscalls: 2525 2019/10/20 11:54:36 code coverage: enabled 2019/10/20 11:54:36 comparison tracing: enabled 2019/10/20 11:54:36 extra coverage: extra coverage is not supported by the kernel 2019/10/20 11:54:36 setuid sandbox: enabled 2019/10/20 11:54:36 namespace sandbox: enabled 2019/10/20 11:54:36 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/20 11:54:36 fault injection: enabled 2019/10/20 11:54:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/20 11:54:36 net packet injection: enabled 2019/10/20 11:54:36 net device setup: enabled 2019/10/20 11:54:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 11:57:33 executing program 0: 11:57:33 executing program 1: syzkaller login: [ 244.464743][ T8690] IPVS: ftp: loaded support on port[0] = 21 [ 244.618700][ T8690] chnl_net:caif_netlink_parms(): no params data found [ 244.660473][ T8692] IPVS: ftp: loaded support on port[0] = 21 [ 244.667358][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.676536][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.685028][ T8690] device bridge_slave_0 entered promiscuous mode [ 244.697166][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.704732][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.714003][ T8690] device bridge_slave_1 entered promiscuous mode 11:57:33 executing program 2: [ 244.752703][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.773590][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.873953][ T8690] team0: Port device team_slave_0 added [ 244.903208][ T8690] team0: Port device team_slave_1 added [ 244.921365][ T8696] IPVS: ftp: loaded support on port[0] = 21 [ 244.937595][ T8692] chnl_net:caif_netlink_parms(): no params data found 11:57:34 executing program 3: [ 245.059772][ T8690] device hsr_slave_0 entered promiscuous mode [ 245.099244][ T8690] device hsr_slave_1 entered promiscuous mode [ 245.214464][ T8698] IPVS: ftp: loaded support on port[0] = 21 [ 245.240940][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.248237][ T8690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.256117][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state 11:57:34 executing program 4: [ 245.263277][ T8690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.353503][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.360856][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.371737][ T8692] device bridge_slave_0 entered promiscuous mode [ 245.459516][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.466612][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.489094][ T8692] device bridge_slave_1 entered promiscuous mode [ 245.555790][ T8696] chnl_net:caif_netlink_parms(): no params data found [ 245.576215][ T8701] IPVS: ftp: loaded support on port[0] = 21 11:57:34 executing program 5: [ 245.598138][ T8692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.655388][ T8692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.685719][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.704817][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.753509][ T8690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.771387][ T8692] team0: Port device team_slave_0 added [ 245.782325][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.791468][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.799309][ T8696] device bridge_slave_0 entered promiscuous mode [ 245.808372][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.815600][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.823325][ T8696] device bridge_slave_1 entered promiscuous mode [ 245.832592][ T8698] chnl_net:caif_netlink_parms(): no params data found [ 245.842373][ T8692] team0: Port device team_slave_1 added [ 245.864128][ T8696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.898252][ T8696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.910975][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.919207][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.936685][ T8706] IPVS: ftp: loaded support on port[0] = 21 [ 246.002220][ T8692] device hsr_slave_0 entered promiscuous mode [ 246.058516][ T8692] device hsr_slave_1 entered promiscuous mode [ 246.118230][ T8692] debugfs: Directory 'hsr0' with parent '/' already present! [ 246.139052][ T8690] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.161765][ T8696] team0: Port device team_slave_0 added [ 246.170408][ T8696] team0: Port device team_slave_1 added [ 246.181066][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.188488][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.196255][ T8698] device bridge_slave_0 entered promiscuous mode [ 246.204284][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.211481][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.219588][ T8698] device bridge_slave_1 entered promiscuous mode [ 246.264106][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.275392][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.284228][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.291319][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.299048][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.307538][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.315961][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.323031][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.361048][ T8696] device hsr_slave_0 entered promiscuous mode [ 246.418392][ T8696] device hsr_slave_1 entered promiscuous mode [ 246.468287][ T8696] debugfs: Directory 'hsr0' with parent '/' already present! [ 246.482788][ T8698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.535850][ T8698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.558449][ T8701] chnl_net:caif_netlink_parms(): no params data found [ 246.573317][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.594685][ T8698] team0: Port device team_slave_0 added [ 246.601893][ T8698] team0: Port device team_slave_1 added [ 246.647137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.675609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.687357][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.721074][ T8698] device hsr_slave_0 entered promiscuous mode [ 246.768707][ T8698] device hsr_slave_1 entered promiscuous mode [ 246.808141][ T8698] debugfs: Directory 'hsr0' with parent '/' already present! [ 246.827788][ T8701] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.835118][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.843514][ T8701] device bridge_slave_0 entered promiscuous mode [ 246.851473][ T8701] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.858642][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.866841][ T8701] device bridge_slave_1 entered promiscuous mode [ 246.883243][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.912442][ T8701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.927439][ T8701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.983904][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.993088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.013782][ T8706] chnl_net:caif_netlink_parms(): no params data found [ 247.025022][ T8701] team0: Port device team_slave_0 added [ 247.033181][ T8701] team0: Port device team_slave_1 added [ 247.111180][ T8701] device hsr_slave_0 entered promiscuous mode [ 247.148606][ T8701] device hsr_slave_1 entered promiscuous mode [ 247.188200][ T8701] debugfs: Directory 'hsr0' with parent '/' already present! [ 247.231563][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.240009][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.253772][ T8690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.265705][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.285292][ T8692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.298201][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.306515][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.326126][ T8706] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.335601][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.343514][ T8706] device bridge_slave_0 entered promiscuous mode [ 247.351689][ T8706] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.358881][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.366490][ T8706] device bridge_slave_1 entered promiscuous mode [ 247.392261][ T8706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.406242][ T8706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.431904][ T8696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.448130][ T8706] team0: Port device team_slave_0 added [ 247.456210][ T8706] team0: Port device team_slave_1 added [ 247.467424][ T8692] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.491743][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.499475][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.524876][ T8698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.580081][ T8706] device hsr_slave_0 entered promiscuous mode [ 247.628571][ T8706] device hsr_slave_1 entered promiscuous mode [ 247.668240][ T8706] debugfs: Directory 'hsr0' with parent '/' already present! [ 247.690164][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.698844][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.707144][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.714223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.722671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.731499][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.739409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.747874][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.756290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.763342][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.771434][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.779108][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.786785][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.795776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.806784][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.819122][ T8696] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.837101][ T8698] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.858470][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.878465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.887176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.895851][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.902938][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.910980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.919839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.928402][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.935438][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.943262][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.952230][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.961989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.970908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.981034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.989978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.017187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.033113][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.043099][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.050225][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.058651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.067354][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.076112][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.083206][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.091576][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.100210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.108935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.117343][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.125738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.134972][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.143744][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.152347][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.162847][ T8701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.193003][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.201206][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.210348][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.218953][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.227426][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.236796][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.245425][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.253694][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.262608][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.271234][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.280224][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.288866][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.297091][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.305459][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.313841][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.328796][ T8701] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.341264][ T8696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.354581][ T8698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.366011][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.401900][ T8692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.426656][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.441536][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 11:57:37 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000300)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xfffffffffffffcaa, 0x2000000000000}], 0x10, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x268c40, 0x0) fallocate(r1, 0x0, 0x20, 0x8) clock_gettime(0x0, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, 0x0) socket(0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x80000001) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, 0x0) sched_setattr(r3, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x11) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x181280, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="220000f2d4c48103000000dde008e6448000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000c40)={r9}, &(0x7f0000000d00)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r9, 0x6635, 0x7}, &(0x7f0000000180)=0x8) [ 248.452893][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.469409][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.487510][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.511835][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.518992][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.527321][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.536585][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.545459][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.554308][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.563019][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.578931][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.587368][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.594542][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.620470][ T8696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.661568][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.704003][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.725867][ C1] hrtimer: interrupt took 44085 ns [ 248.751819][ T8698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.785842][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.801691][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.939605][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.957961][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.973815][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.983085][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.992360][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.004863][ T8692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.016385][ T8701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.037745][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.052934][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.072572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.084382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.094938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.162693][ T8706] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.259098][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.266993][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:57:38 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x282000, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@journal_dev={'jouI#\x93\x00\x00\x00\x00\b'}}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x3f, 0x3, 0x1, 0x8, 0x7, 0x9, 0x6, 0xfc, 0x7d, 0xff, 0x8}, 0xb) 11:57:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x28, 0x32, 0x2, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0xffffffa3, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8}}]}]}, 0x28}}, 0x0) [ 249.340201][ T8701] 8021q: adding VLAN 0 to HW filter on device batadv0 11:57:38 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x85}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000300)='-m\bNiZor\x00', 0x9, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x800, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x1) sendfile(r2, r3, 0x0, 0x8000fffffffe) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x800, 0x4) dup2(r0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) recvmsg(r5, &(0x7f0000000480)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000003c0)=""/138, 0x8a}, 0x200) r6 = gettid() tkill(r6, 0x3c) r7 = syz_open_procfs(r6, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000240)={0x3, 0x7856ec28, 0x1000, 0x67, &(0x7f00000000c0)=""/103, 0x6b, &(0x7f0000000180)=""/107, 0x16, &(0x7f0000000200)=""/22}) [ 249.400270][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.424690][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 249.424704][ T26] audit: type=1804 audit(1571572658.632:31): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir731654842/syzkaller.b2Ge9N/2/bus" dev="sda1" ino=16524 res=1 [ 249.439482][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.478244][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 249.484234][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 249.505828][ T8761] EXT4-fs (loop3): Unrecognized mount option "jouI#“" or missing value [ 249.512965][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.521389][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.568464][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.576539][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.586477][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.604561][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.611699][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state 11:57:38 executing program 0: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x80000000, 0x1, 0x4, 0x4, {0x77359400}, {0x5, 0xc, 0x2, 0x2, 0x1f, 0x9, "68a20310"}, 0x7fffffff, 0x3, @offset=0x6f4, 0x4}) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) unshare(0x40000000) [ 249.620331][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.629434][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.638832][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.647747][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.658649][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.698401][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.709237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.717789][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 11:57:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0018000000000000050200000502000000314e32901706b39cbd24660027ea51ed9ed92fe32a80000000000000008336c300613e5c60830aff57904d4f054d186ea25e05020000005d2f7a80483dcb9eaf898be01526afca6c87942252e62d9baf2906ae7452f8e0b54e34118fb92c139992000000007fffffffa70d3ea854c8e90dfc261d03df30c900005a165f9490bc052b67582e8329fb8b695335932503000000000000060000000000000000e3d6323bedf981ce006b0828481174bdd8fe4ec35c40bd9d772ab954b9c2bdfadc62667902bf1e841d8de855d8b99587e1961a80bba916d1110fa9c1e7f09d0c59daf71ecf4c73479ca7150fb51dcdaadc977c4c337ea997ce1c76628cd27521a09d37a024d2e3fe66e296c37bf915d1fd7830b160d5c44f74d17754dc472e1b0d81708fcdbdd24585d67bc158d7c7820768a4f8303d2a451ed747e41b6b72c9c7ba53a7e2d5977b45cdd4d8e7bead5dee32c7e584181ba30208ffb0d677c69dcbd3f65515acfdd831764b09b259d030ef6bb2c56e176198763ec30178fc6b026c1d4e72e91fb494c233ffddf5f6c9c26de16e8488b10f59842ceaaabc84c44ee5cd82fcd6cae33e689a3d5e3d3b66f6deddbff22ac1b4efa1eb2b9756d68c966756384a3dab33522723dfd3c47fdccec520b8ab63ce068abfba1270510f59929956b3c9d4c363fde0ea4ea281b9d561f19769b602625e99c52f70c69cfa9e19229e4619cf0fb4c612fd37a4e2f92688bc394353ffa506ad811a67eb5fe5dfab40c080dbd4ee583463b434abf8c04812afa17d387f00ce070b218df507cedbe7f642c5501ed3b545b1ec1f512796b7e00a637b93c45a1cc216116beb1f7b77c8d9814e37732a2f05f2d4d83b927b9bf0286311d6642e21b689f6f81e1c20f875cb8ecd8a632575e820d3efc013929a7d241ea53f02bc73149ec1aba8a1a556f69eb152c35ecb39dc64ce59b1ace435877e444c65e4ae89314bf781f585cd28419853c1beb5c8a89be7d3166acbc875f883af063b72e998f823baac10bbcf290116c7579c441fed478e35002bb64948ddb67548c818a0575168158bea2e53066f881ef95818b9"], 0xc8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000580)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8000400200) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffff) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) [ 249.810160][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 11:57:39 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x400, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 11:57:39 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) write$capi20(r1, &(0x7f0000000000)={0x10, 0x9, 0x86, 0x80, 0xffff, 0x9}, 0x10) fcntl$setstatus(r0, 0x4, 0x2400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x1) sendfile(r4, r5, 0x0, 0x8000fffffffe) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000140)=0x10001, 0x4) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0xa) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) [ 249.836999][ T26] audit: type=1804 audit(1571572659.042:32): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir731654842/syzkaller.b2Ge9N/3/bus" dev="sda1" ino=16517 res=1 [ 249.922732][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.947327][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.977888][ T8706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.991933][ T26] audit: type=1804 audit(1571572659.092:33): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir731654842/syzkaller.b2Ge9N/3/bus" dev="sda1" ino=16517 res=1 [ 250.005536][ T8776] IPVS: ftp: loaded support on port[0] = 21 11:57:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x68, r2, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x2000020) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000001}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x68, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0xff, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000002, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x12100) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, 0x0) [ 250.111588][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.133863][ T26] audit: type=1804 audit(1571572659.202:34): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir359510169/syzkaller.SnT0uA/2/bus" dev="sda1" ino=16534 res=1 [ 250.139687][ T8783] overlayfs: './file1' not a directory 11:57:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4001, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r6, 0x0, 0x0, 0x1) sendfile(0xffffffffffffffff, r6, 0x0, 0x8000fffffffe) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote, 0x80000001}}, 0x5, 0x6}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000200)={r7, 0x4}, &(0x7f0000000240)=0x8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0xc008aec1, &(0x7f0000000080)) r9 = dup3(r3, r4, 0x0) dup2(r9, r8) [ 250.253382][ T26] audit: type=1804 audit(1571572659.342:35): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir359510169/syzkaller.SnT0uA/2/bus" dev="sda1" ino=16534 res=1 [ 250.300773][ T8790] overlayfs: './file1' not a directory [ 250.326293][ T26] audit: type=1804 audit(1571572659.342:36): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir359510169/syzkaller.SnT0uA/2/bus" dev="sda1" ino=16534 res=1 11:57:39 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) write$capi20(r1, &(0x7f0000000000)={0x10, 0x9, 0x86, 0x80, 0xffff, 0x9}, 0x10) fcntl$setstatus(r0, 0x4, 0x2400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x1) sendfile(r4, r5, 0x0, 0x8000fffffffe) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000140)=0x10001, 0x4) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0xa) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) [ 250.565346][ T26] audit: type=1804 audit(1571572659.452:37): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir359510169/syzkaller.SnT0uA/2/bus" dev="sda1" ino=16534 res=1 [ 250.615146][ T8804] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 250.617319][ T8776] IPVS: ftp: loaded support on port[0] = 21 [ 250.643619][ T26] audit: type=1804 audit(1571572659.452:38): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir359510169/syzkaller.SnT0uA/2/bus" dev="sda1" ino=16534 res=1 [ 250.693234][ T26] audit: type=1804 audit(1571572659.492:39): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir359510169/syzkaller.SnT0uA/2/bus" dev="sda1" ino=16534 res=1 [ 250.787120][ T26] audit: type=1804 audit(1571572659.492:40): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir359510169/syzkaller.SnT0uA/2/bus" dev="sda1" ino=16534 res=1 11:57:40 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7fff}]}, 0x78) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) dup2(r2, r1) getuid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fsetxattr$trusted_overlay_redirect(r3, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x0) 11:57:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa400295c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r6, 0x0, 0x0, 0x1) sendfile(r5, r6, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$VIDIOC_S_EDID(r9, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) ioctl$CAPI_GET_MANUFACTURER(r9, 0xc0044306, &(0x7f0000000280)=0xff) r10 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f00000000c0), &(0x7f00000003c0)=0x4) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000780)) getsockopt$inet_mreqn(r10, 0x0, 0x0, &(0x7f00000002c0)={@rand_addr, @local, 0x0}, &(0x7f0000000300)=0xc) sendto(r6, &(0x7f0000000100)="336c7c5720789def6d6049147a1820776870cce1348fce6352a23dbe885bff5cb6326ca5416f89edbb8bff30b08d241c1cb9fc8f9e648dad9051edf391b106d7ef31a51db2725b5c7136fe6307b581141cc7033df9a79b17e4c883b6c3f9b3cb05525637ff09df1e2ec2dab5af7d76e29b4ef432a764cb00fc4bc5a920d67352cd64acea6d208bae0c178a383f608ec359ca9a611f16ba6aec9707b28f718a03f55347e5422868fc46e376ea7fa5c6184f3fe0d27fa54235c00bcd52afae20200ec7ea8b1ac294f30e083934d40068b4020527aa306953baad046b6dbc677d", 0xdf, 0x40, &(0x7f0000000340)=@hci={0x1f, r11, 0x2}, 0x80) r12 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r13 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r13, 0x0, 0x0, 0x1) sendfile(r12, r13, 0x0, 0x8000fffffffe) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r1, r4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) 11:57:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x20, 0x40) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000100)=0xf, 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f00000002c0)=@sco, 0x0, &(0x7f0000000080)=[{&(0x7f00000024c0)=""/4096}, {&(0x7f0000000600)=""/214}], 0x0, &(0x7f0000000700)=""/127}}, {{&(0x7f0000001780)=@rc, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001800)=""/237, 0x31}, {&(0x7f0000001900)=""/150}, {&(0x7f00000019c0)=""/108}, {&(0x7f0000001a40)=""/115}, {&(0x7f0000001ac0)=""/246}, {&(0x7f0000001bc0)=""/143}], 0x0, &(0x7f0000001d00)=""/255}}], 0x400000000000334, 0x26, &(0x7f0000003700)={0x77359400}) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r3, r3}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x00\x00\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\xd5~\xa0+_\x82{\xbf\xb2\xabqT?\x9e\xbf\x17\x00'}}) keyctl$get_keyring_id(0x0, r4, 0xfffffffffffffffe) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r6, 0x0, 0x0, 0x1) sendfile(r5, r6, 0x0, 0x8000fffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x2}}, 0x20) 11:57:40 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) lstat(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000001c0)={0x8, 0xffff7fff, 0x2, 0x8aa5, 0x5, 0x7}) r0 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000140)='R\x10rist\xe3cusgrVii:De', &(0x7f0000000180)) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVii:De', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)=0x80000) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) close(0xffffffffffffffff) 11:57:40 executing program 1: fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) bind$alg(r5, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x100000230) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x10000000000443) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(r8, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r9, r10/1000+30000}}) r11 = accept4(r2, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x10000000000443) setsockopt$netrom_NETROM_T4(r12, 0x103, 0x6, &(0x7f0000000000)=0x4, 0x4) r13 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r13, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x8, 0x6, 0x0, 0x6, 0x0, 0x5, 0x6, 0x9, 0x300f, 0x101, 0x5, 0x8001, 0x7, 0x8, 0x5, 0x10}}) r14 = getpgrp(0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r16 = accept4(r15, 0x0, 0x0, 0x800) r17 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x10000000000443) sendto$netrom(r17, &(0x7f0000000340)="294f27d6ab9c90e6b2f7b89c768168f01f5afa8883cc6279b1e1d43aea17a523ba6dd09d4e9cb4bd162307543f7cb7267ac1916e16132fbfec847b86b468c7466dc40bebd9e0909f94f5507691b82e1d2c9fc3e67a7f4ccd4d1e9f2662a4440aaaf621fe0749de202b03ef407015fcd21667781d44c1d60c104589e8a984b2bd00838373337609101418fc35d2366ac52fc4842807470e208f4ec42737a848935936b0966b7eb2bb1f4dfbb73f52c7816f6907a087bd91266f545f237cefc42949c72e2da137d56d851cde48c2fbd417b3fdbc679b8576631f624fcd5f50", 0xde, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setpriority(0x0, r14, 0xffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', 0x0]) 11:57:40 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@part={'part', 0x3d, 0x80030000}}]}) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x1) sendfile(r3, r4, 0x0, 0x8000fffffffe) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000040)=0x4, 0x4) 11:57:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000140)={0x79e0, 0x4, 0x81, 0x9, 0x5, 0xc64}) mkdir(&(0x7f00000004c0)='./file0\x00', 0x40) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid'}}, {@fscache='fscache'}, {@access_user='access=user'}]}}) 11:57:40 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@journal_path={'journal_path', 0x3d, './file0'}}], [{@smackfsroot={'smackfsroot', 0x3d, ':]em1'}}]}) [ 251.214041][ T8836] IPVS: ftp: loaded support on port[0] = 21 11:57:40 executing program 4: r0 = socket$inet6(0x10, 0x1200000000003, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea8430291040000390009002200050014000000080005001400081001f3678b80142314e9030b975668a5b16732009b110cb1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5058, @local}, 0x1c) prctl$PR_SET_UNALIGN(0x6, 0x0) 11:57:40 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r3, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 251.438750][ T8855] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 251.455875][ T8860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.463399][ T8860] IPv6: NLM_F_CREATE should be set when creating new route [ 251.470657][ T8860] IPv6: NLM_F_CREATE should be set when creating new route [ 251.521278][ T8855] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 11:57:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1ff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000000c0), &(0x7f00000003c0)=0x4) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000780)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0xdb128b61c3d211a5) perf_event_open$cgroup(0x0, r3, 0x4, r6, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$inet6(0xa, 0x3, 0xb0) bind$inet6(r8, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000d) signalfd4(r5, &(0x7f0000000100)={0x229}, 0x8, 0x80000) ioctl$TUNSETFILTEREBPF(r7, 0x6609, 0x0) 11:57:40 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400200000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x4, {0x38d, 0x0, 0x80, 0x8}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040901) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=""/153, 0x99}, {0x0}], 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), &(0x7f00000003c0)=0x4) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000780)) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000000)={0x80, &(0x7f0000000380)="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"}) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000017c0), 0x1b4, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000003600)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000003680)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000037c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003780)={&(0x7f00000036c0)={0x98, 0x0, 0x4, 0x0, 0x25dfdbff, {}, [{{0x8}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x73}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40046}, 0x40000) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x1000002, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = gettid() tkill(r5, 0x3c) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe1, 0xd5, 0xb5, 0x4, 0x0, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x4, @perf_config_ext={0x6, 0x100000001}, 0x0, 0xff, 0x5, 0x1, 0x8, 0x3, 0x7ff}, r5, 0xe, r2, 0x8) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r6, 0x0, 0x0, 0x1) sendfile(r4, r6, 0x0, 0x8000fffffffe) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000280)=0x7, 0x4) [ 251.733559][ T8836] IPVS: ftp: loaded support on port[0] = 21 [ 251.965696][ T8887] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 251.991746][ T8887] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 252.040850][ T8887] F2FS-fs (loop4): invalid crc_offset: 0 [ 252.076344][ T8887] F2FS-fs (loop4): invalid crc_offset: 0 11:57:41 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7fff}]}, 0x78) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) dup2(r2, r1) getuid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fsetxattr$trusted_overlay_redirect(r3, 0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x0) 11:57:41 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000280)=0xef1a98d424a73cc7) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000780)) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='9p\x00', 0x1004000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776053a166a7", @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.L,posixacl,version=9p2000.L,privport,pcr=00000000000000000038,subj_user=,permit_directio,\x00']) fadvise64(r3, 0x0, 0x0, 0x1) sendfile(r2, r3, 0x0, 0x8000fffffffe) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) fcntl$getown(r6, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) close(r3) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x1) sendfile(r4, r5, 0x0, 0x8000fffffffe) write$P9_RREMOVE(r4, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=0x2, 0x4) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) inotify_init1(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x40) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) [ 253.334105][ T8945] IPVS: ftp: loaded support on port[0] = 21 11:57:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_sctp(0xa, 0xbfb73145933b89ce, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x8000, 0x0) r5 = shmget(0x1, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffff86) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r6}]]}}}]}, 0x40}}, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) 11:57:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000280)=""/172, &(0x7f0000000000)=0xac) socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f00000003c0)=0x4) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000780)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) r6 = gettid() tkill(r6, 0x3c) setpriority(0x0, r6, 0x1d) renameat2(r2, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x4) unshare(0x400) pselect6(0x40, &(0x7f00000000c0)={0x5}, 0x0, &(0x7f0000000140)={0x1bb}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) 11:57:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x6000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x2004c4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$VIDIOC_S_EDID(r8, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xb5, "bbf85adadb2764ec74be7fb8a500544daa33f1c52c0458d19d33423b9cc613f1eb5d095676a70917f9e3a8f04b79e0bb6caa053411da925f6ed64898c01a2ca766010eddaa9b0fadfe598edfed3a0ffec9f7a9cc7973da67566119e44e74ab0c3776cb20cd8b30c9759dfcf04a8f6f6d5a3a4f2784466c5d72ec74a233c32a44e854af8457582db35ad97fec72da296f654d422b41214268ed32a1cbec95d8145a658552e761400647d4e919fbce4954e0a04c19e4"}, &(0x7f0000000340)=0xbd) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000380)={r9, 0x8, 0x3, [0xfffd, 0x800, 0x800]}, &(0x7f00000003c0)=0xe) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x14005, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) 11:57:43 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7fff}]}, 0x78) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) dup2(r2, r1) getuid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 11:57:43 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@x25={0x9, @remote={[], 0x3}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="141aac141412e0000001f5de6a0c15961ff499f27015a1f00ffb661be6e7", 0x1f8}], 0x1}, 0x0) [ 254.643722][ T8968] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 254.671131][ T8971] IPVS: ftp: loaded support on port[0] = 21 11:57:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$l2tp(0x18, 0x1, 0x1) [ 254.705263][ T8972] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 11:57:43 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7fffffff}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x3, 0x76, 0x9, 0xffff7fff}, {0x1b0, 0x82, 0x8, 0x80000001}, {0xff, 0x1f, 0x4, 0x5}, {0x1, 0x81, 0xa1, 0x4}, {0x1ff, 0x4, 0xe1, 0x38}, {0x0, 0xff, 0x6, 0x7}]}) syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="02005500000001000000ff07000000000000000000000000000000000000000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 11:57:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x20000) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000100)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/79, 0x4f}) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000031001d012abd70000000000003000000bc015d9f84751ad070c7a255d03f21c1d930a5307f08b786fd8ae438ae30a342c5986bdc4f5ab304843c3a05ab8c5cc19b221c4f1fa3bbad71830d0682b7edb13ef1ecff4223fa785e230cc77ea93974f6ff"], 0x2c}}, 0x0) 11:57:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000040), 0x18) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140)="24c8385939070000008bad2beba5005cf47d12e27903d3f8168b9f62f35cc5f4ec", 0xd635455c3de76378, 0xffffffffffffffee, 0x0, 0xfffffffffffffec0) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xb71b829b6f5560a, 0x0, 0x0, 0xfffffffffffffff1) 11:57:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000e0000002000000000000000000000000e00000010000000000a13977c0e5554b7f00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xf8}, 0x8}, 0x0) 11:57:44 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff97}}, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) shutdown(0xffffffffffffffff, 0x0) futex(&(0x7f0000000340)=0x1, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f0000000440)=0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x161, 0x0, 0x0, 0x7115}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000280)={0xa0, 0xfffffffffffffff5, 0x8, {{0x0, 0x3, 0x2000000000000, 0x6, 0x1d, 0x7, {0x0, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1ff}}, {0x0, 0x66b0c27fb34fd0cf}}}, 0xa0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000001000800120000000100000000000000000006000000000000ff00000000000000000000000000ada800800400004015000000000003000600df12000002000080901fffbbf00000000000000003000500000100000200423b30632bd7b82000000000000300000000000012000000000000"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x7000028) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r3) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x8001) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}, r7}}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000480)={0x1, 0x0, {0x19, 0x15, 0x13, 0xf, 0xa, 0x5, 0x5, 0x15b}}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x17e, 0xfa00, {&(0x7f0000000500), 0x4, {0xa, 0x4e24, 0x1, @rand_addr="4da6ef74c0bccd2da52d3c41948742fc", 0x800}, r7}}, 0x38) 11:57:44 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7fff}]}, 0x78) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) dup2(r2, r1) getuid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) [ 255.168663][ T8985] ldm_validate_privheads(): Disk read failed. [ 255.229209][ T8985] loop0: p1[EZD] [ 255.251536][ T8985] loop0: partition table partially beyond EOD, truncated 11:57:44 executing program 1: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7fff}]}, 0x78) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) dup2(r2, r1) getuid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) [ 255.315178][ T8985] loop0: p1 start 1 is beyond EOD, truncated 11:57:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000040), 0x18) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140)="24c8385939070000008bad2beba5005cf47d12e27903d3f8168b9f62f35cc5f4ec", 0xd635455c3de76378, 0xffffffffffffffee, 0x0, 0xfffffffffffffec0) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xb71b829b6f5560a, 0x0, 0x0, 0xfffffffffffffff1) [ 255.402687][ T9009] IPVS: ftp: loaded support on port[0] = 21 11:57:44 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) r2 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x1000000, &(0x7f0000000800)}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x401, 0x2, {0x3, 0x0, 0x4, 0x3, 0x9}}) close(r2) 11:57:45 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7fff}]}, 0x78) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) dup2(r2, r1) getuid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) 11:57:45 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) r4 = socket$inet(0x2, 0x2, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000c40)={r8}, &(0x7f0000000d00)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={r8, 0x4, 0x101, 0x5, 0x933}, 0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0xffb4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) [ 255.873794][ T9019] IPVS: ftp: loaded support on port[0] = 21 11:57:45 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xcec}, [{0x0, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7fff}]}, 0x78) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) socket$pppoe(0x18, 0x1, 0x0) dup(0xffffffffffffffff) dup2(r2, r1) getuid() openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) [ 256.113226][ T9040] IPVS: ftp: loaded support on port[0] = 21 [ 256.182581][ T9043] IPVS: ftp: loaded support on port[0] = 21 11:57:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r4, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) 11:57:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip_vtI0\x00\x00\x00\xe4n\xe1\x18\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20100, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000440)=""/88, 0x58, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) getresuid(&(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000500)) ioctl$VIDIOC_S_EDID(r7, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$VIDIOC_S_EDID(r12, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) io_cancel(r9, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x7ff, r0, &(0x7f0000000580)="f809d91f9276f39a335fd87d1d2e43d2a95fad8e5748c2eb1492368c5fa1c2be1e505fc27d43a83db06d4a7e8ace78b9d7044106a16bf1982956a5739e0162a108978adf28407adbbef360298c3ef099d22aa32b445ca61e29ac10c324577013f44219a8a802eaa4500a556b0f6f992367e6cefb0d1a27e2890a1cb620dcbe81ee2c02751dca477271c944ff55d308ec072dade44b76e7f235", 0x99, 0x2, 0x0, 0x2f2eae9fe7db4067, r12}, &(0x7f0000000680)) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) ioctl$SIOCAX25NOUID(r7, 0x89e3, &(0x7f0000000300)=0x1) 11:57:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip_vtI0\x00\x00\x00\xe4n\xe1\x18\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20100, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000440)=""/88, 0x58, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) getresuid(&(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000500)) ioctl$VIDIOC_S_EDID(r7, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$VIDIOC_S_EDID(r12, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4}) io_cancel(r9, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x7ff, r0, &(0x7f0000000580)="f809d91f9276f39a335fd87d1d2e43d2a95fad8e5748c2eb1492368c5fa1c2be1e505fc27d43a83db06d4a7e8ace78b9d7044106a16bf1982956a5739e0162a108978adf28407adbbef360298c3ef099d22aa32b445ca61e29ac10c324577013f44219a8a802eaa4500a556b0f6f992367e6cefb0d1a27e2890a1cb620dcbe81ee2c02751dca477271c944ff55d308ec072dade44b76e7f235", 0x99, 0x2, 0x0, 0x2f2eae9fe7db4067, r12}, &(0x7f0000000680)) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) ioctl$SIOCAX25NOUID(r7, 0x89e3, &(0x7f0000000300)=0x1) [ 256.745984][ T9034] ================================================================== [ 256.754308][ T9034] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200 [ 256.762721][ T9034] Read of size 4 at addr ffff8880a3b10080 by task syz-executor.5/9034 [ 256.770946][ T9034] [ 256.773284][ T9034] CPU: 0 PID: 9034 Comm: syz-executor.5 Not tainted 5.4.0-rc3-next-20191018 #0 [ 256.782205][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.792261][ T9034] Call Trace: [ 256.795615][ T9034] dump_stack+0x172/0x1f0 [ 256.799955][ T9034] ? refcount_inc_not_zero_checked+0x81/0x200 [ 256.806026][ T9034] print_address_description.constprop.0.cold+0xd4/0x30b [ 256.813064][ T9034] ? refcount_inc_not_zero_checked+0x81/0x200 [ 256.819137][ T9034] ? refcount_inc_not_zero_checked+0x81/0x200 [ 256.825203][ T9034] __kasan_report.cold+0x1b/0x41 [ 256.830144][ T9034] ? refcount_inc_not_zero_checked+0x81/0x200 [ 256.836209][ T9034] kasan_report+0x12/0x20 [ 256.840541][ T9034] check_memory_region+0x134/0x1a0 [ 256.845655][ T9034] __kasan_check_read+0x11/0x20 [ 256.850517][ T9034] refcount_inc_not_zero_checked+0x81/0x200 [ 256.856415][ T9034] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 256.862260][ T9034] ? __kasan_check_write+0x14/0x20 [ 256.867376][ T9034] refcount_inc_checked+0x17/0x70 [ 256.872492][ T9034] nr_release+0x62/0x3e0 [ 256.876797][ T9034] __sock_release+0xce/0x280 [ 256.881395][ T9034] sock_close+0x1e/0x30 [ 256.885576][ T9034] __fput+0x2ff/0x890 [ 256.889563][ T9034] ? __sock_release+0x280/0x280 [ 256.894419][ T9034] ____fput+0x16/0x20 [ 256.898403][ T9034] task_work_run+0x145/0x1c0 [ 256.903000][ T9034] exit_to_usermode_loop+0x316/0x380 [ 256.908293][ T9034] do_syscall_64+0x65f/0x760 [ 256.912947][ T9034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.918836][ T9034] RIP: 0033:0x413741 [ 256.922738][ T9034] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 256.942347][ T9034] RSP: 002b:00007ffe0fdc6520 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 256.950764][ T9034] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413741 [ 256.958739][ T9034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 256.966722][ T9034] RBP: 0000000000000001 R08: 00000000c180b19c R09: 00000000c180b1a0 [ 256.974781][ T9034] R10: 00007ffe0fdc6600 R11: 0000000000000293 R12: 000000000075c9a0 [ 256.982752][ T9034] R13: 000000000075c9a0 R14: 0000000000761b18 R15: 000000000075c124 [ 256.990722][ T9034] [ 256.993044][ T9034] Allocated by task 9035: [ 256.997361][ T9034] save_stack+0x23/0x90 [ 257.001497][ T9034] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 257.007119][ T9034] kasan_kmalloc+0x9/0x10 [ 257.011442][ T9034] __kmalloc+0x163/0x770 [ 257.015723][ T9034] sk_prot_alloc+0x23a/0x310 [ 257.020529][ T9034] sk_alloc+0x39/0xf70 [ 257.024592][ T9034] nr_create+0xb9/0x5e0 [ 257.028733][ T9034] __sock_create+0x3ce/0x730 [ 257.033311][ T9034] __sys_socket+0x103/0x220 [ 257.037815][ T9034] __x64_sys_socket+0x73/0xb0 [ 257.042491][ T9034] do_syscall_64+0xfa/0x760 [ 257.046977][ T9034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.052846][ T9034] [ 257.055157][ T9034] Freed by task 9034: [ 257.059124][ T9034] save_stack+0x23/0x90 [ 257.063275][ T9034] __kasan_slab_free+0x102/0x150 [ 257.068192][ T9034] kasan_slab_free+0xe/0x10 [ 257.072673][ T9034] kfree+0x10a/0x2c0 [ 257.076551][ T9034] __sk_destruct+0x4aa/0x680 [ 257.081130][ T9034] sk_destruct+0xd5/0x110 [ 257.085436][ T9034] __sk_free+0xfb/0x360 [ 257.089570][ T9034] sk_free+0x42/0x50 [ 257.093444][ T9034] nr_release+0x356/0x3e0 [ 257.097752][ T9034] __sock_release+0xce/0x280 [ 257.102323][ T9034] sock_close+0x1e/0x30 [ 257.106458][ T9034] __fput+0x2ff/0x890 [ 257.110418][ T9034] ____fput+0x16/0x20 [ 257.114378][ T9034] task_work_run+0x145/0x1c0 [ 257.118946][ T9034] exit_to_usermode_loop+0x316/0x380 [ 257.124208][ T9034] do_syscall_64+0x65f/0x760 [ 257.128779][ T9034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.134644][ T9034] [ 257.136956][ T9034] The buggy address belongs to the object at ffff8880a3b10000 [ 257.136956][ T9034] which belongs to the cache kmalloc-2k of size 2048 [ 257.150985][ T9034] The buggy address is located 128 bytes inside of [ 257.150985][ T9034] 2048-byte region [ffff8880a3b10000, ffff8880a3b10800) [ 257.164317][ T9034] The buggy address belongs to the page: [ 257.169939][ T9034] page:ffffea00028ec400 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 257.179021][ T9034] flags: 0x1fffc0000000200(slab) [ 257.183950][ T9034] raw: 01fffc0000000200 ffffea0002a2b108 ffffea0002717508 ffff8880aa400e00 [ 257.192512][ T9034] raw: 0000000000000000 ffff8880a3b10000 0000000100000001 0000000000000000 [ 257.201095][ T9034] page dumped because: kasan: bad access detected [ 257.207492][ T9034] [ 257.209809][ T9034] Memory state around the buggy address: [ 257.215426][ T9034] ffff8880a3b0ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 257.223467][ T9034] ffff8880a3b10000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.231505][ T9034] >ffff8880a3b10080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.239548][ T9034] ^ 11:57:46 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmmsg$sock(r1, &(0x7f0000004040)=[{{&(0x7f00000002c0)=@generic={0x6, "060a10485dd135e1a22cfc98bc86a110d73317d8c44ed98ba16d229f8147a51b118aca32f4c28c3f2f519acc67bb094b6a6592355b6c5e3ed41a1061d718009eb9790ba8c69d4f77d7ede9630d25906b2d59d268a9f7ccf3b22a7cbd6c3a4c33af826ddc5eafde51329d8b7cc5ec9e16cf905a49266f2aa64fe2b2ad7c8a"}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000340)="0931f0583a7012e5b27a6c106475e598c3daa7ce1673848a2c6953c50bc74daae175dea85a2e696dd9ad03423621ce5a87d24d770b85db7b7937c1b94a333bc4158b5242744b23092e49293b716781189830f5fffe56155ce122d78bc740840d36c7281d003a10e2d4a6ca53af33f8531aeaa240bfc9de3af415b619", 0x7c}, {&(0x7f00000003c0)="ae4c165f926a10e79105eb3134c9b81b66b41527053675109c81ff9fba892c7f7ee96874a961fc7df3fd5f47553c6bb95b69909c6d81bbc9c6662fd0c4a240dcc8becfb00db6565fcd2d6f18db3384905aab20ffab4586b54bf39c98ef6bc885043dcb4974bb8878e06bd3133088b4097b5623d0557f2dbfad6fe68f662c160b6a6ec76d912b798d2dd9c559edd42737d391bbe44bf60035b7f5e324eba80994c564ae3438329cf48739b0e2f726", 0xae}, {&(0x7f0000000140)="0f8e509bbacf150210849c10b69abb12ffa342", 0x13}, {&(0x7f0000000480)="2a05abc6455ae801bad038209f33229d2f0cb4de9726b93c6f96150718f8048c22c08ce7a33f6402fc5cd942dbdac55211f920183915a33f75b9b8cef8f9e74fb6e7f4b9b71c6d5f8b46f70f56d93ded8b8d8eef8a43cc74bc3896ae21496ea8b495052f3c7f3112e6d2c4eea8d3c0913d2f4b4c666221315e35128ac9a24805fa972d65f456820444720751fc4e5e492df870232d40e23e94d8b87c55e04e71824e077a3da8c79ee05ec98ba4d41528aa1861b3792e42137e3c7018af1084d1c88b142af0dbd191a840c5db25ab664589ef04f2c5f7a64e32df992e0a5b23e4", 0xe0}, {&(0x7f00000006c0)="1b748f1801dbfd6f5c7b28ea5c18b1f374fd16a7a8703871bf6ca1ce585b92c8fc22b3df47f504396fcee8095b92d7823531cdde9c7dc3022979daa43582e28720eefb9c9fd53271bcd62e6c88164e2ae0adae07b1added1b8eb36092ebfeba6245a6f37719afc8b0645037fc2ca2f1eb672024fa924a0d24a52cb2561f6bad6b82bfcaa4d8d55698bae1f9f840496b8ddbb04bfb6201c99ec0ca90dd17311d6159f15961984791fb5ca896c263fefade47f11cd30b3918866e3675e45db33e3a258f7f8", 0xc4}, {&(0x7f0000000580)="eedf828c555e0d044da734c6d5461dc9c63d3506d0931ca878a908b59afb6ee8cc0c8630cc4e972ebbe5ef921cad5a671076e9db02c512b75e1dcef97c36a8dd0098d94fe2d82fde35", 0x49}, {&(0x7f00000007c0)="589e0618c8b8d036b0633c838507a586cab124c65c4214eccf8d05ca7957634fc9eab163cba601f96297896c9cdc2306f515700f7fe67470dadaec78c6ab0c9705316539e1a5f508ca600f50fe0dd7d4b063c5bc6c2254a5061f31d0704334110af2849aa0cec0bee4a9c875f664105a030a795cc1727e7568556daa996ddfe43819e3a35d8184b2acc144907e5b1d1f06bc12fa5f75c7d2fc1fca94290f2b43550cd33d4718afb1d8220e34a86400ed715977aba1de402054ead26a236ee5246cb4363af70f28f0340af313338a2666d9bb19e1b86f10f5970ec268f4de0b", 0xdf}, {&(0x7f00000008c0)="31817295afce36c7e5c594af3b7297611f61b80dc547252fbe83db8c5db138100f605a567927c1642637587305d27e38fccfa46d8de65f5b7b9d37fe36e79949ed95df0b5399be98191af5693334e1722b773ff152673eec868d5f62d4c95427f50a3d89419854c473b1933a3a2499e02ed4965ccedf64e21203c4fc247e7d209c367cd9c422fd61b1f9cc93f71458fff7bd096eb7c91a76814aab2832eff781cd7b863a4c22abea37f4cb88697b840d4c556033b0f03ac2106f712b0925d1b49ae4b34bacd100bb0b71b9847f62b4f0095f438d1b2e74a3522deb1a664f9695fa4af5f3a965824aa5a8224e6a9071fa0a9fc6a62fc87438", 0xf8}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000200)="6600e11016f5dd94fb34ab5dda53a22a06d94fff8d5fc8abca4010", 0x1b}], 0xa, &(0x7f0000001ac0)=[@timestamping={{0x14, 0x1, 0x25, 0xf456}}, @txtime={{0x18, 0x1, 0x3d, 0x73bd}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x63}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xf0}}, {{&(0x7f0000001bc0)=@ipx={0x4, 0x7, 0x9, "fb30bd394978"}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)="7f444dc05b342c0bbb0a07f45870daa174048968dab1e1f9e93b0c2b5a580b8f0a79aafd0aba084b1cda42a4dde268c6a569ca44bf704761ef2f62a67eb5c5dcc5eb4194ed34ff512ff671ac09bcb82ad42b612ea11a55d09c4e1713f2b6c87fd1c5444c042b5fb201b97d840a0c7cc0ae0cb0f80d310a876610eda8d72fef7ca69c5d7c0e8832e5104d0f5f1bcb2d1b60f3d2f2f31fdd06e439c488a01c5b0f0a399998a4c1c428fd71aac23c461a49cb052f42f8f7dd613b6b6688fe3faa3a03f1b53910dfb38c32b0acf51f452bd50c01", 0xd2}, {&(0x7f0000001d40)="11c9", 0x2}, {&(0x7f0000001d80)="ce08a3e4cb461b3df4c301cb641c60290cc27ca18f83d3b8a689032bdc388bd31c48dacc70e841e29cdef79a3a3f100ae6e3517d2387244dd2dda5ebc7203b94dd5554dc8874845451d2", 0x4a}], 0x3, &(0x7f0000001e40)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}}, {{&(0x7f0000001e80)=@can, 0x80, &(0x7f0000003f80)=[{&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="6c5526a63534fe63003334d912cdfb600916acf063d727c2161502002a6b5aed7f10147b1adb1081ff52ab6b26010c07c0c679ab93fc9ef9212a26a715f36050f72cbe8d5ba0bf93c4b841a02dbc2d539a", 0x51}, {&(0x7f0000002f80)="8b3e0eaf803afcb54cabf4a07ed5230edc969cdf28ae5972cf2713e6ee6c2dfa5e3fba2c25d24cbbdc8a58582f7f51f4524b70c660125267a49649ea3515c5f311a0003c634cc6577fe481bbf78bb1d9b7297c520985c97a7192a95a35b5464f8099b303cd844e9217739c0c294aeae2b09619a70b4c9291c702e4ab29c75d553ff24e2ac2296f38072cdbf73bece0af188241a631c03ec0bb764183ca0355b37222598d1bd08ef802d42943c16448aaf2a0ec35ecdfa6a3bca484187e86c6d7a3ccecd6e52e011c568425f7ffa0d530ce865a542027ed56cffb632fc840bd7457884120238b5761967227b7c6be5dd339d3237f7a586c50e1e6a977066558013c4544a1c4adf865fa97bb461fe300ce8d241669e7a5bc95bf5c00069daad65bc4f38487da8c6ffcd077932c88e50af4225496c7a8913cc0ac395915529e4ac2d9ed22d320376c1acd76c66b13e238786e3665d54f75a43c01ae48db51cb626a3d5720851ae73c177db14cb1e880340f0fa4772f1d9651d623718bc2ec8b477f976c9bef6a258b4ab75796f18c5f948182a7b87aed7e8ca64856566cf71063f8c98294d1dc2fbe300dfe4c5613a9a112580bc99dfac67f1116dd697a3f26285d62c5dbdcf87f81ede9ac0b37e328bac5a84ef4004b9fafc5bba9c77b1692844872591fda5f225b49332749557df75135921b70900dde3806652ec178847f179f1ff1b5dd59d5ec405c1b3816cc2d0b8e363aa844d5f9860a32f5f7c55cccd464a6b5e72c7eeaa6e701194a7f16b125f136d47584da86f896fddd7f53f201919df1c04db7f1ce3951b30c8a5141102ba6639980e68c62d89ad6fac961162e71c4b67de6e5104b2af1e8f64fc7b175da3e01d9374834735a0b3f91983b1e157a934fcad09d0269522d607bc9ba413e7f99ca0833fb01bd8d2fe10142cc065253a62283e31cc6b4d50b8bca114ef8a8ea1b2145d49e56a5aa2fc3b659810c59f821ac0c0e972149599685b2ea92c42909d9f47c6ce6298b1048f0ce5835ff407df9b8f779b62abbd7b7f197a10267f7429dcab3ff519b9de317c075ab1459d3aac458eca98c609bd73bdb8e7182dccd2a093f0b27a1bdff79a9e5e033b69d9204af5a23108d73d616dd8f57edf76632fca2eb010908546b4175e3644913c0d4257d7977f4980f32e78f08259446124fd5ca711440c8105d1f1b385d8391b69a1268eba83b459384c8d2329240e84517fdffe8cde7ce8acde1e94ee8fdec7287d09e32866112d4a4702b83d2bd202028099de7e591792e3e2afe66b9901c598c005986eddc54336ed85aa5a86c56af3ecac1dc875932916bf0d7bad4a6631a5b12277241cbee8692bd27e10f684201406908c6233c2b2e721f7c071175d61d0ba9a0458f6bd70cb4d6c8a087bfe59594c200a171716735b661200e48049813cbef0b1f5f85dc8159cdf0160cccbebefae503cf2289a453e0aded184509b0a9052a8dce1be81f203eed6356f11816df5858adfe4f245c2d229bd28656d30389ea7a6efb0adc682ab0b5759d2db9c70b110ab898ea08027748394dbdca9e19c629eef4bc27f1999efd9e7c36707350bec22849a294ed103e198ffbc82a579db4197ca4b4d0f965b930b5e2039868149e98790772a70a3c98cc3a6e080225b022b2c6fb5d349d8347688fdd0bf10ad12c843263f207d368b60b08af546f0a83842002813fc36c697ebb5dd9ce0a9b58d9f49a1301aa8aff62e09efcb9794b87577cd3b8d297c13e95809f80f8d1ccb6149da574a9788b6c9599e4b8c9e353c537e83ae484848d381b0ac2eceb2096fd40fee61151f3fddb822b8890a7708dd918b71c920fddb9abeead7633a003d8cedab2de1e093b0211ab3187de31af2617575d5110a578064e1704da8d6927593bfacb874422fb5c77050ec775eb4942139ab6d662a54276699d4e8415db2e4d7be6f1322e00e3c8af9917a6835c6a2711e3c371836cb32260e655f61f52b521bdcfb1bc67a5bed84ed1faa698474cab28e8c415f27f6740196e805c43939c493700f77d380f9efcade06784c73a8f82c06c3fec1e0c2d4c66ed7fde3a4195574f9a8220eb4f2691f73760a5abc1ccf60de0a992cd9963bd5ea3d20b21cf76996caf6119ba9e6410ef7cbf7f063989ed254315f62c6185cdbfdb6df38a603539020402aa166cddb71fa30ce27dc09283b058532659531ce2836e3f536aa00fb28f1a81bfe2b54b09e71d0d2a7e4415d9f6da835324ae75120ec681f92766f094bcab1a5ef28216df3b057825e8d56dc06d06ead7a6a3a8d8ddd0d3fede81b708000d80b9a5842fe6ca494b3c9d5ae5dff780117e004ae803e9ed867afc74758106693b7070d290104f8382277d7626b9aaa84a20b772812603fe876f44c60114b63af37caddd8869b862a8cd190e32b50f60efeb395f01379aaa7fe3ba37aedf418394888fb2f93d8b807d7aa76499320c691626d5bb488c4a28ec42a84329e095a559b10475a39f552bde401424f426bc1e765c77ef3be757580c9d8af8435a19aa7579e83334ee84cae31d47f96ab8be230783eadad94736db01e5b1875bea5ca5f3662704dd1c44640c3c0ce4eb97090ced3a9279768a9e67bd8e224f11ccee937ff7fd9c3ae2a8a7ab3ac30bbab6cba5e5ffe2770f4ffb46c76511086b6a006bedfb299aa1845a085964a64e0f9121b72a12c8833edad477bf7fdca033b3b9a95f2f883b4cfaaf1b7465acab9b8cd963bb4c16e8d8df28545d0f90a5cf61b476308e43b3cef82c11c6fc5a8d0814af6c105522f054f10706e6bda9485cad9c00931deb1d28b0d1b2510240255fbfc304f518f543d45924e0779ccd5d855702be257dcc9394965e45cf858af5ef52c959ba4b316cb5bd0ed58721d4b06e2c27b39bae6c15ece9c8bedcd3d8197a04c65996938516809bdb03a81e5fdc51ba534144f2d2116bd07e9680aca67d7e68ca0637c1008ac13bc017702e0b837e57466b26a8d8f68a66075ee6c4c7ab3c360f0389ac59826af9bd159b369af944bcbacd4ffc6bbf2e2ff307284525a38c1cc35491474e457c25f29a5cc305b6009faba2770dc8148c25f8e2a13dc4f179298d3cfd83defe4e5ac030159ccb9c3f5838f3c1aece2dc814e4a07946e4fe653d689f4dd632eb8cabc90010a47e129608223026b5da51d71e3a534283188e27532ead7f9467d421119e582d4d77b5a76629fe7565ea855324dca708f413f31630ff4cdfddf04eba9795e5b4134b8b0aa68cbcd66828b9d56d20b6a3a03007667d8d169ed50e6e4d869447a2970b86f9bb875be126467e540c1b587e5082f80f5e23696719ae1b9db6f96bd929f0d05e130e23b83c36a42a17679e58845300aa3a76bdc89d9714dee1bf13fb71bd0b0656e0847d72e08d70eec4a133e23005b203e0c15139d64406650af4eddacc818ee9c1b7bab94b2b62c089ffd668a7f04d0aab99dd09873f9e2b8db670c48dd5bd68bd0c34fa2018e0f6026c6bd8a785520bfd1ef2a425dd7cc35aac068a4f506966a8559a7671d46fe6b42264b6f28ea3b7bf4c42ef39182cac95f9d21f234b41e0fd8ddd08cfb4ced02d12bdd9f9134280c9e44a8b4ec3657b783ab69899e255cba72fdb2291be47e6a95be20ea1539fb9139c12f8587caadd7407744ce98cb4037e20338af2361f1e39e54ae2bd6a46bcc07c73d7691bd779ec92f54bad084f121d48e734ac42b2fcfbc8f0631edf22286dc86fe9a8eb6138edeec02c35c12cd1ed116b34b384fda6a09be7d38b380fcdaf7718028960294cf16dbf92bf81bf054424b3244a421584fb8aa094584bea58f0f978bb440d6722d7f92ee2eb25489475d141b50011a6a589737b3870c90bcc6c47b98d7d8a129e0c9da205d1ec420dd84c1b5e63540c6fcb83f12b2edc6d2cba399de9bcedf9628010e5696df32d4f5a37590b03c53e248e373796109d75cf1dfa10bb061e0e8f0142ae8875386b7a738b9218b816d7491cf1809b97ff20bd6af4060e0e1d6910e7b9ff6121375bc1e93952ed4a2f9be430b78a8cdb10dfe3b0feb49b5e1448bd766633c29764d06fbb35e25e5dbd3fb420f487083fc3394e5ffc25d78367d947e1b0dc3bee2986aee4433098a37e5982ef908ff0339c3fb9e78ce779a3000b92ee4233f25a84f49729919d5e81de6c44a46fbd418bcee0e26fac3e6140e8f90fefd4b49064b65ef87ca835ae5f6e24cec02f7d81e29560be513d6ed9c9def365b984e53843761fec51e9ba991bed78d63f3f7fd20a84ef23ce2a86f2a369b91763b85dbeacbcc52fe375f2e8151fad836257798d5abafdd8e83740e14aa2f0cbdbfffcc46bce0533dc51f530d4e61511fb6c1a560dc84468986630b7f634da31f6237cd0ec0066c813056b77e27e031e324b70f2f0c5ef1b0e2c288b0576db31de03d6aed81df0dc708d06844f2de475cf343f2cd5d9e49a5405c03022c239b7eed78d21eb948fe07e3a1fb696ca4e83a3c4bf7e8e8de2994bf73c89154d5bcd8963dd787de89fbdd91b17d9b0c21f44783824f05da141b4149c680779595759d79abb6a4adae1fe2a57e0eba4f3e4f5d8df37d37087decbc1eb92de99c1a711bd815cb3420e664dd0bd72225dc7859301a05870705344ce6369ec44f944396a43fed23f54c9893347824ed134b8eeb4a2044db5099714b6285b3036f67c41857d903965b3a34e72aa2aec41f2f0487a3f56386c8e779a717a95de72bbe68521ae9e71ec4250d51cb5b3c4930c03a4a6b5e84eabac592c2002b0ee2864dce1842e18b5dde51d14495368372c51449b6a691699e74c4eec0dd781490da25ebce5b77ebcb56541535826e61e7947f90c56a96e7224200b51fad584492ed300db353ca226e0b6ea4fccd39de486b8b0328c8414f0b9885ccb4fbc8db675eef87f96aaacfbbc542e11fce9f7fbc5c4b90d784e5ea3fa2e832940fa502f63527e3ac6a5b41b25fcf736c30ff184355cf34396a24d72904f81c84edab7371522685974d63492b2f564ea6d6001c76d226689ded900405d0e35acf9df86e48fb92ec7dd885695b26c688f915e5e0a8fa51a4b02b5fb111bfa1362a0b01903b620e55601fe248f7be2ad64ec5b352ef96033bcc4612e707c703173a4473ca567fcc51a085e12a6fb6772891096f4990347126043dba8a61097e2f6fd80934981ce410f766a65db05b55181c95fccb21df3b86fb852d2d4ca7ea9aaecbf569d14ae222b0279263f5f2486d464ff41fb2cacd71e0e81ac9416a6a5065df8fb29eafd94e2118f5bc2c9d679393cddc21206a3d26d4fcaead8d09539c96502aa281d87fe70fb4fdc7f8f8fbd63a87b1a07c52ea001de8b6433a9b3df9082bb4b7b9982b8c0ccfa7fc5ef78ee3fa169f191e7d842add2adfb25f0543618ff0ac80841c67ac06079956a8a38ef33d750c07188829e23a0bdc02906394b33507cf13ca3514c2c098311ae542a6161325d223b617da67957a1569400cf277cc8554779283e999d00c3346dc546fa64bb26960dda20ea7abd0dacc8af927c28b16cc62b8f808997ddd4150d59b3e655a1276dd53c7217bc4fcda2d1697d50c3fb5e3e3e6d0379da1e56c4be161a53c660a084eaaa1852c8e0eac8d1ebb951a7d615ee6960098d5b4d26378a7a33baee59c630287a2e98ff4b2729420e17c38710bd26cfb5655fb825cd86a03e12e992f04b21236f1693541a6ac201a09ae0b7382cc448dbc509d53d80b145e99403ac641fa0d2344ab54445e0eb384e4c443efc2f20677fe0", 0x1000}], 0x3, &(0x7f0000003fc0)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0xccfb}}], 0x48}}], 0x3, 0x4005) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) setuid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000000005,defcontext=sysadm_u,func=BPRM_CHECK,fo', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,smackfshat=selinuxvmnet1,f', @ANYRESDEC=0x0, @ANYBLOB="df96"]) [ 257.243596][ T9034] ffff8880a3b10100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.251636][ T9034] ffff8880a3b10180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.259680][ T9034] ================================================================== [ 257.267715][ T9034] Disabling lock debugging due to kernel taint [ 257.388078][ T9034] Kernel panic - not syncing: panic_on_warn set ... [ 257.394729][ T9034] CPU: 0 PID: 9034 Comm: syz-executor.5 Tainted: G B 5.4.0-rc3-next-20191018 #0 [ 257.405041][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.415092][ T9034] Call Trace: [ 257.418383][ T9034] dump_stack+0x172/0x1f0 [ 257.422708][ T9034] panic+0x2e3/0x75c [ 257.426594][ T9034] ? add_taint.cold+0x16/0x16 [ 257.431270][ T9034] ? refcount_inc_not_zero_checked+0x81/0x200 [ 257.437337][ T9034] ? preempt_schedule+0x4b/0x60 [ 257.442187][ T9034] ? ___preempt_schedule+0x16/0x20 [ 257.447294][ T9034] ? trace_hardirqs_on+0x5e/0x240 [ 257.452488][ T9034] ? refcount_inc_not_zero_checked+0x81/0x200 [ 257.458896][ T9034] end_report+0x47/0x4f [ 257.463046][ T9034] ? refcount_inc_not_zero_checked+0x81/0x200 [ 257.469104][ T9034] __kasan_report.cold+0xe/0x41 [ 257.473952][ T9034] ? refcount_inc_not_zero_checked+0x81/0x200 [ 257.480014][ T9034] kasan_report+0x12/0x20 [ 257.484335][ T9034] check_memory_region+0x134/0x1a0 [ 257.489437][ T9034] __kasan_check_read+0x11/0x20 [ 257.494280][ T9034] refcount_inc_not_zero_checked+0x81/0x200 [ 257.500167][ T9034] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 257.506060][ T9034] ? __kasan_check_write+0x14/0x20 [ 257.511167][ T9034] refcount_inc_checked+0x17/0x70 [ 257.516191][ T9034] nr_release+0x62/0x3e0 [ 257.520430][ T9034] __sock_release+0xce/0x280 [ 257.523125][ T9067] overlayfs: filesystem on './file0' not supported as upperdir [ 257.525019][ T9034] sock_close+0x1e/0x30 [ 257.525039][ T9034] __fput+0x2ff/0x890 [ 257.540665][ T9034] ? __sock_release+0x280/0x280 [ 257.545510][ T9034] ____fput+0x16/0x20 [ 257.549486][ T9034] task_work_run+0x145/0x1c0 [ 257.554078][ T9034] exit_to_usermode_loop+0x316/0x380 [ 257.559364][ T9034] do_syscall_64+0x65f/0x760 [ 257.563957][ T9034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.569844][ T9034] RIP: 0033:0x413741 [ 257.573736][ T9034] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 257.593336][ T9034] RSP: 002b:00007ffe0fdc6520 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 257.601753][ T9034] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000413741 [ 257.609726][ T9034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 257.617708][ T9034] RBP: 0000000000000001 R08: 00000000c180b19c R09: 00000000c180b1a0 [ 257.625683][ T9034] R10: 00007ffe0fdc6600 R11: 0000000000000293 R12: 000000000075c9a0 [ 257.633656][ T9034] R13: 000000000075c9a0 R14: 0000000000761b18 R15: 000000000075c124 [ 257.642392][ T9034] Kernel Offset: disabled [ 257.646721][ T9034] Rebooting in 86400 seconds..