[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 32.332930][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 32.332940][ T26] audit: type=1800 audit(1550766919.356:29): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 32.359559][ T26] audit: type=1800 audit(1550766919.356:30): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. 2019/02/21 16:35:28 fuzzer started 2019/02/21 16:35:30 dialing manager at 10.128.0.26:45125 2019/02/21 16:35:31 syscalls: 1 2019/02/21 16:35:31 code coverage: enabled 2019/02/21 16:35:31 comparison tracing: enabled 2019/02/21 16:35:31 extra coverage: extra coverage is not supported by the kernel 2019/02/21 16:35:31 setuid sandbox: enabled 2019/02/21 16:35:31 namespace sandbox: enabled 2019/02/21 16:35:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/21 16:35:31 fault injection: enabled 2019/02/21 16:35:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/21 16:35:31 net packet injection: enabled 2019/02/21 16:35:31 net device setup: enabled 16:37:59 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x404000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r2}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x3, 0x4, 0x0, 0x2}}) fchdir(r2) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24}, {0x2, 0x4e24, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)='ifb0\x00', 0x7, 0x70000000000, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x100000000, 0x1, &(0x7f0000000280)=0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) fsync(r2) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000540)) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000580)={0x0, 0xd2, 0x36}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000005c0)=0x1) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000640)=""/180) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000700), &(0x7f0000000780)=0x6e) r5 = add_key$user(&(0x7f00000007c0)='user\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="41acdd4a60337c48c70ba2b55e249afaf4d80696a177f78a4a4144f529df193a2d9d78a909c9712a59a5a1a382a06dcb8b5143b334811dd128234ec846419a822bac155b2b4fd389db8e8c3ab4e7f0858267b6de7cdc1cbd14a80da673056c8f8e4003a754952c3fd1d30cf40d029091f710b4ba6b695ba534d9055ed2981fa8873a90d71e", 0x85, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r5, r6) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000980)={0xf, @output={0x1000, 0x1, {0xff, 0x6}, 0x100000000, 0x81}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x0, 0x380, 0x0, 0x100, 0x248, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x5, &(0x7f0000000a80), {[{{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x808, 0x200, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x5, @multicast1, @broadcast, @icmp_id=0x67, @port=0x4e20}}}}, {{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xc, 0x8, 0x7f}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x6, 0x1, 0x2, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @multicast2, @multicast2, @icmp_id=0x65, @port=0x4e22}}}}, {{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x800, [0x3, 0x5, 0x7fff, 0x0, 0x4, 0x2d6e], 0x8, 0x7}}}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0x11, 0x2, 0x800}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @multicast2, @empty, @icmp_id=0x68, @gre_key=0x4}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0xff, 'tunl0\x00', 'ipddp0\x00', {0xff}, {}, 0x6c, 0x2, 0x8}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x65, 0xd, 0x1, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x14, @empty, @rand_addr=0x5, @gre_key=0x1, @gre_key=0x5}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x598) r7 = accept$unix(r4, &(0x7f00000010c0)=@abs, &(0x7f0000001140)=0x6e) pselect6(0x40, &(0x7f0000001180)={0x4, 0x2, 0x100000001, 0x7f, 0x7, 0x86, 0x9fb0}, &(0x7f00000011c0)={0xfffffffffffffffe, 0xffff, 0x7, 0x3, 0x101, 0x3, 0xe, 0x20}, &(0x7f0000001200)={0x2, 0x1, 0xe31, 0x4, 0x4, 0x0, 0x0, 0x8}, &(0x7f0000001240), &(0x7f00000012c0)={&(0x7f0000001280)={0x8}, 0x8}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)={&(0x7f0000001300)='./file0\x00', 0x0, 0x18}, 0x10) readahead(r7, 0x8, 0x7) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000013c0)={0x12, 0x10, 0xfa00, {&(0x7f0000001380), r3, r2}}, 0x18) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000001400)={0x1, r4}) syzkaller login: [ 192.878349][ T7434] IPVS: ftp: loaded support on port[0] = 21 16:37:59 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x7ec, @ipv4={[], [], @rand_addr=0x81}, 0x7}}, [0x9, 0x2, 0x3, 0x7, 0x4, 0x8, 0x4, 0x80000001, 0x2, 0x4, 0x7fff, 0x80000001, 0x8, 0x3, 0x6]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x7, 0x7, [0x1000, 0x2, 0xdf2, 0x4, 0x80, 0x101, 0x400]}, 0x16) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x101000) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0x4}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x8}, &(0x7f0000000280)=0x8) fsync(r0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000002c0)={0x1, 0x5, 0x0, 0x1, 0x0, 0x7a}) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000300)={[0x100000, 0xf000, 0x3, 0x110000], 0xffffffffffffffcd, 0x4, 0xe42a}) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000380)={[], 0x81, 0x3, 0x2000000000000, 0x0, 0xfff, 0x4, 0x6000, [], 0x10}) fcntl$getownex(r3, 0x10, &(0x7f0000000540)={0x0, 0x0}) sched_getaffinity(r4, 0x8, &(0x7f0000000580)) sendmsg$nfc_llcp(r0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x27, 0x0, 0x2, 0x6, 0x6, 0x5, "cfa49cf47907c58e066524d843feefce8af615add2954c4dc91d1558e97fa4ce9fb2caa82824540fbf6ad923f5700f36573d061ddfd029e003a891cbcb11e6", 0x28}, 0x60, &(0x7f0000000900)=[{&(0x7f0000000640)="a14718c961cb9dc094483cc71482f3ccece855f77d133a054710b787ecb981141a8a9025613e5ee177377e7d3ff836062580f221cc201b3c9c41d2aa1b953abac8c29760aff4c4959f429f15e41eaaaf0e9992b02bcfbe1d8a1b523d08c19b17312e2fc4c7cb61624253a0083696b085d1b4b97fdeb7fec2bfaea46aaf9ebb170158823fb8d5645e7862db707bab81098e114d23cbf7a2614dca9cf4be393f34cecb6bee7a1cfd617bf38f36c6e935a8", 0xb0}, {&(0x7f0000000700)="10c6d31ae998cafe0ee28e24c8b5b2945b1970694557c5a0cc0cf4e21685a9d0e86c12a4ece50e888c38b57090133db1fd5fa66bc06ceaf3b89d58892890f30d729695b1ea8a419d1872918cde54b51302b4c4b9b66b7f79c877004499fe9efea38723d51246309de9687ede5db68d488139c182fc340aede4bb3da152720eeb7610a004538d0022f29e6b805a8f34164fe3118e17286b4177a899f4fbbdf0c1f6ad086e659c7b2a0900f80044e25c0047f744f90ac2a6b0be0ed9df179788b4379333941359", 0xc6}, {&(0x7f0000000800)="1a605a4c13ac83d1137fa685df841723e04e509486d33348d18815c9ad29ea90faf7f40b3465c47b8a1dfe85575ed7faa70b430578add87795eb16aa101add09bb89c0cd95bb42331f1437c6566bb89b17efbd563ca8855069de83848f2c12cd0e793708b0bebfe4e20e7fda391c0da23eadac1ab404ef4a1ebb6626742a4af01c5b71bd55045280cd233f07db00ab033b926c12b849964524836955aae4863f577d656872419cee72121aebc018c5ea37319cf4b5a00ced4fd9734da45c2f41f37aa77a75677ffbad67dd0a716cd14cd2a11311255b46", 0xd7}], 0x3, &(0x7f0000000940)={0xa8, 0x116, 0x400, "43d6ba22c24bc902add8423f8cf3c4ed2d38547d5b324a401b7a2e9d778fedf9a128ae1675f1140c4bd835bed0516680cc05ce50f12ebb43c7b22f32b81a0918571d34e23d951db40c4c3fceafa5a703a4c715f04a483b88a0aa9ce0bc42237433a871a042f74e59feb02314a06b0e91824f3a21ea1ed7f774fad66839d206bfaebee73d26cd3cfce76a9d8e799082c61afde28bdc"}, 0xa8, 0x40001}, 0x4000010) ioctl$RTC_UIE_ON(r1, 0x7003) connect$bt_l2cap(r0, &(0x7f0000000a40)={0x1f, 0xfffffffffffffeff, {0x8, 0x4bf4, 0x7, 0x1, 0x9, 0x100000000}, 0x0, 0x5}, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r1) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000a80)) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1e94) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e24, 0x1, @loopback, 0x4}, {0xa, 0x4e21, 0x5, @mcast1, 0x5a26}, 0x8, [0xc303, 0x7ff, 0x1, 0x7, 0x7, 0x1, 0x6, 0x7f]}, 0x5c) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000b40)={0x22, 0x3, 0x0, {0x4, 0x1, 0x0, '&'}}, 0x22) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000b80)=0x11, 0x4) r7 = add_key(&(0x7f0000000bc0)='ceph\x00', &(0x7f0000000c00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key$keyring(&(0x7f0000000cc0)='keyring\x00', &(0x7f0000000d00)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$search(0xa, r7, &(0x7f0000000c40)='pkcs7_test\x00', &(0x7f0000000c80)={'syz', 0x1}, r8) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000d40)='lp\x00', 0x3) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000d80)={0x0, 0x6, 0x2003}) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000dc0)={0x0, 0x0, [], @bt={0x15bdc4d0, 0x8, 0x1, 0x7, 0x3, 0x648d86cd, 0x2, 0x2}}) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000001e80)={r3, r5, 0x3, 0x1000, &(0x7f0000000e80)="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", 0x3, 0x7, 0x7, 0x8, 0x0, 0x3, 0x8, 'syz1\x00'}) connect$inet(r1, &(0x7f0000001f40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 192.999798][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 193.076701][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.100426][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.108180][ T7434] device bridge_slave_0 entered promiscuous mode [ 193.116491][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.123723][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.131729][ T7434] device bridge_slave_1 entered promiscuous mode [ 193.149660][ T7437] IPVS: ftp: loaded support on port[0] = 21 [ 193.162776][ T7434] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:38:00 executing program 2: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x6, 0x1, 0x3}, 0x7, 0x3c4}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x9, 0x15, 0x9, 0x1, "3815a2a53e50ca6477d57213226e2a997409956fe3f6e8d59cd00602f389bd0d"}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x8) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x8000000000000000, 0xc, 0x4, 0x1, {0x77359400}, {0x5, 0x1, 0x7, 0x100000000000000, 0x1, 0x80, "eab27ba2"}, 0x7, 0x4, @offset=0x9, 0x4}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000001c0)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @rand_addr="cab81b733b44f2ecd54509a3b9de94d5", 0x80}, 0x1c) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000240)={0x7b, 0x63d6, 0x4, 0x6, 0x1f}) eventfd2(0x2, 0x80801) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000300)=[0x9, 0xffffffff]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) sched_getattr(r2, &(0x7f0000000380), 0x30, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r3, 0x609, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x40800) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000540)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000580)={0xffffffffffffffff, 0x6, 0xc43, 0x9, 0x7ff, 0x1f}) getsockname$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @multicast2}, &(0x7f0000000600)=0x10) write$9p(r1, &(0x7f0000000640)="fcd037d6450153733eb8a224c16dac1d81890dbc87884d596a289b2813425f801fbacbe8d7b5407ea9af7e004063bd9c5216ffb1fb4967b680cdf4ae0d5808bd309ae0b366e1a6667c2a5dd2d686b1270dbbeca7815a15346d2c73dc7822ceb3475c42def7b283e075b5911d43e75a05989a7f86d9711919611cc723841c72450e12ba64250b732d1b5da71a748f76ef62e93e961df7728081a15ae3b52c5e8a25695bfd0264b4aa0f154aea8f14da55392313c94fe3ec8065a653aff1490811103063f1c12942cc9a53241d706fd65744f1d28d578b5df9ac224ceed6e4e0690173f17aae91f8", 0xe7) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000780)={r4, 0x2}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000007c0)) recvfrom$inet6(r1, &(0x7f0000000800)=""/208, 0xd0, 0x10000, &(0x7f0000000900)={0xa, 0x4e23, 0x5e, @loopback, 0x8}, 0x1c) umount2(&(0x7f0000000940)='./file0\x00', 0x2) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000980)='/dev/loop0\x00', &(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='fuseblk\x00', 0x0, &(0x7f0000000b80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x200}}], [{@appraise_type='appraise_type=imasig'}]}}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001c80)={@un=@abs={0x0, 0x0, 0x4e24}, {&(0x7f0000000c40)=""/4096, 0x1000}, &(0x7f0000001c40), 0x4a}, 0xa0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000001d40)=""/173, &(0x7f0000001e00)=0xad) [ 193.186479][ T7434] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 193.243092][ T7434] team0: Port device team_slave_0 added [ 193.249930][ T7434] team0: Port device team_slave_1 added 16:38:00 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f0000000080), 0x900000, &(0x7f00000000c0)={[{@nodiscard='nodiscard'}, {@commit={'commit', 0x3d, 0x4}}, {@space_cache_v1='space_cache=v1'}, {@compress_force='compress-force'}, {@nossd='nossd'}, {@treelog='treelog'}, {@inode_cache='inode_cache'}, {@datasum='datasum'}], [{@seclabel='seclabel'}, {@subj_role={'subj_role', 0x3d, '\x86GPL'}}]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x64b, 0x4, &(0x7f0000000180)}) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) socket$tipc(0x1e, 0x2, 0x0) accept4$llc(r0, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x10, 0x80000) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x694c, 0x1}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000480)=""/245) syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') connect$rxrpc(r1, &(0x7f00000005c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r2, 0x7cf02511, 0x0, 0x0, 0x0, @ib={0x1b, 0x87, 0x1, {"c55bfa5f4ca177204ad54b3ef8c7089f"}, 0x100000001, 0x7, 0x7}, @in6={0xa, 0x4e20, 0x0, @local, 0x80000000}}}, 0x118) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000740)={0x8, 0x1, @value=0x1}) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000780)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000007c0)={0x0, @aes128, 0x0, "e687cd28a018343a"}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1) accept4(r3, &(0x7f0000000800)=@un=@abs, &(0x7f0000000880)=0x80, 0x80800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000008c0)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x40802, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000d40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f00000009c0)={0x32c, r5, 0x120, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x124, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6317}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x830}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x370}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x36}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x198b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b17e0b7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33b}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32f7cf4a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x847}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc00000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x571cdbca}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x24040091}, 0x4004000) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000d80)={0xa, 0x4, 0xfa00, {r2}}, 0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000dc0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000e00)={0x100000000}) open(&(0x7f0000000e40)='./file0\x00', 0x80840, 0x80) [ 193.352931][ T7434] device hsr_slave_0 entered promiscuous mode [ 193.400673][ T7434] device hsr_slave_1 entered promiscuous mode [ 193.478302][ T7439] IPVS: ftp: loaded support on port[0] = 21 [ 193.514542][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.521718][ T7434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.529269][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.536363][ T7434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.552592][ T7437] chnl_net:caif_netlink_parms(): no params data found [ 193.574415][ T7443] IPVS: ftp: loaded support on port[0] = 21 16:38:00 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4100, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x600, 0x8, 0xffffffffffffff80, 0x8}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r1, 0xffffffff}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0xffffffffffffff80, 0x30}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2, 0x5}, &(0x7f00000002c0)=0x8) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000300)=""/83) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) ioprio_get$uid(0x3, r4) r5 = socket$inet(0x2, 0x4, 0x1) r6 = fcntl$getown(r5, 0x9) r7 = getegid() setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000480)={r6, r4, r7}, 0xc) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000004c0)=0x80000001) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20ncci\x00', 0xa0040, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000540)={0xfffffffffffffff9, 0x20, 0x6ea3, 0x1, 0x2, 0x8}) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000580)={0x7ff, 0x80, 0x6, 0x3}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000600)={0x1f, r9}, 0xc) io_setup(0x15c, &(0x7f0000000640)=0x0) io_cancel(r10, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x5a2, r0, &(0x7f0000000680)="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", 0xfd, 0x1000, 0x0, 0x3, r0}, &(0x7f00000007c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000800)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000840)={0x0, 0x80000, r8}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000880)={r11, r12, 0x80}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000008c0)) ioctl$ASHMEM_GET_PROT_MASK(r8, 0x7706, &(0x7f0000000900)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000940)={r3, @in6={{0xa, 0x4e24, 0x7, @rand_addr="f10bf57f747ead3af9783621f3a7181e", 0x3}}, 0x101, 0x7}, 0x90) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000a00)={0x5}, 0x4) [ 193.658602][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.692027][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.699151][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.722818][ T7437] device bridge_slave_0 entered promiscuous mode [ 193.735363][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.750499][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.758265][ T7437] device bridge_slave_1 entered promiscuous mode [ 193.791845][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.801945][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.822240][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.840504][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.848853][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 193.916278][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.925114][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.932234][ T7441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.941416][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.951547][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.958614][ T7441] bridge0: port 2(bridge_slave_1) entered forwarding state 16:38:01 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)=0x5) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = mq_open(&(0x7f00000000c0)='$\x00', 0x40, 0x4, &(0x7f0000000100)={0x5, 0x27, 0x6, 0x400, 0x100000000, 0x9009, 0x7, 0x3d6}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='timers\x00') getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x8040, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x102) getsockname$ax25(r2, &(0x7f0000000280)={{}, [@netrom, @rose, @null, @remote, @remote, @null, @remote, @netrom]}, &(0x7f0000000300)=0x48) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000340)={0x5, 0x8, 0x2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000380)) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000400)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x2, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x20040000) syz_mount_image$erofs(&(0x7f0000000580)='erofs\x00', &(0x7f00000005c0)='./file0\x00', 0x1ff, 0x3, &(0x7f0000000800)=[{&(0x7f0000000600)="90066ad2a72f0ffd63726b06d652f4f841a726e254c75eab0cb9f84321aa41f85630928254a81bb4dd3c73b40baeb2255c422a07a4fe9b77042b81b905519ba95363f9eb6b4533f0034ca7864f7618e26ce0a7f2a1447033345302ade9d4498ac20ff8", 0x63, 0x1}, {&(0x7f0000000680)="0eea5921ffffc35dee66f5e0cc3b31df44e3e3279cd19e70632bb353c4d47c9b6e2cb08e888bb39c3812953d5775bfa08d81f2d5b9a5ffb472e9b790b792d0b6155e8fcaeac62420d351301a8056f5472f32b224a65a4d1cb9444547d7f8b0d3651d2e6d2a56d5bae2f387daaf425ed7897b8b3f6e9e8f8c921d2dc3fdd17004fb0f79a70d05d7747c85489541aaeab833411351116b4ec357afb9be45e0a5c8898c7e14d32fd30ebbfe3b8e7d2a6379d68ac339e9022a94ad640659d50268c2dcedacd75b5900eee27eeb116785447a515d05a2fe2e50b0933b1f71630afea0ca4fb0435cd109e8978cac5b", 0xec, 0x7}, {&(0x7f0000000780)="5011a5610b8e9e2d4700a8dc1fd2b860cdf813a634dd70fcad50986793eacf75d6f06aed7029eed87c04b17654ec5eddb09d27356e7e6ec8908bf7f178d3863085be676263146d22216e8fcee1032bc2db55975b464c4c", 0x57, 0x2}], 0x4008, &(0x7f0000000880)={[{@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection'}}], [{@obj_role={'obj_role', 0x3d, '^#vmnet1\'^'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x3, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000a40)=0x9, 0x4) setxattr$security_evm(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='security.evm\x00', &(0x7f0000000b00)=@v2={0x5, 0x3, 0x4, 0x7, 0xd8, "73ba3ebcbc581798bfccb8314c48524c87ede2668cf30c62d462f462a2c64e4339b6311817612ed5da47f57e28fc4cad1877ceed73f308dcf80df2b07859f18b2f59e9b4fb808e4398ff22fc48682b480955b6b19254a3e2d08eecff0c6617a753947eaa13b19eb4e27185112a40eedc95d39fd065c036b47515767c7a90cb0e7a88c2b187325994c8a1094cb708e8f93bbca613febc88b4182319ddcc69fa34b2a8678f368ca685e6e9162e8b3255ce28132e7980d3b5a4d8363ad64a05f8cc07d620b0ffb560cfe6276dc83b72601898656a07e31e08dd"}, 0xe2, 0x2) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000d40)=0xe8) r6 = getgid() chown(&(0x7f0000000c00)='./file0\x00', r5, r6) open_by_handle_at(r1, &(0x7f0000000d80)={0x97, 0x100, "5bcf3ec20fcbbefbc63d25b8a243809da6a826384c987c564cfc40539640507df2a9a648bd350c4a62da22bb05456821d454257657730eedc936d6a883fdb13b31c2b588efbaf71f0d4b84c4902cfaac19319fb2e75b01942e5f0683ab1bd416378aa0d4f22619a2c5398ce950533d7e23d2684ed18f0a1e6a4b0ea8dec7828d8a69b843e6f43363c54181fe28693b"}, 0x200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000e40)) chown(&(0x7f0000000e80)='./file0\x00', r5, r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f00)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, r7, 0x508, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000001000)={0x0, @speck128, 0x0, "0278bf3402d3097c"}) [ 193.974403][ T7447] IPVS: ftp: loaded support on port[0] = 21 [ 193.979605][ T7434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.991694][ T7434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.015614][ T7437] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.034563][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.044669][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.055320][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.065264][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.097911][ T7443] chnl_net:caif_netlink_parms(): no params data found [ 194.109654][ T7437] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.124670][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.133375][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.154330][ T7451] IPVS: ftp: loaded support on port[0] = 21 [ 194.194701][ T7437] team0: Port device team_slave_0 added [ 194.203660][ T7437] team0: Port device team_slave_1 added [ 194.239568][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 194.249052][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.256525][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.264184][ T7443] device bridge_slave_0 entered promiscuous mode [ 194.276536][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.283673][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.291652][ T7443] device bridge_slave_1 entered promiscuous mode [ 194.304174][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.371878][ T7437] device hsr_slave_0 entered promiscuous mode [ 194.422711][ T7437] device hsr_slave_1 entered promiscuous mode [ 194.536321][ T7443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.552873][ T7443] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.572446][ T7443] team0: Port device team_slave_0 added [ 194.578177][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.608186][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.616861][ T7439] device bridge_slave_0 entered promiscuous mode [ 194.641592][ T7443] team0: Port device team_slave_1 added [ 194.651267][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state 16:38:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) [ 194.658446][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.674970][ T7439] device bridge_slave_1 entered promiscuous mode [ 194.750692][ T7447] chnl_net:caif_netlink_parms(): no params data found [ 194.782501][ T7439] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.832804][ T7443] device hsr_slave_0 entered promiscuous mode [ 194.865186][ T7443] device hsr_slave_1 entered promiscuous mode 16:38:01 executing program 0: creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 194.924315][ T7439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.940565][ T7451] chnl_net:caif_netlink_parms(): no params data found [ 194.956775][ T7437] 8021q: adding VLAN 0 to HW filter on device bond0 16:38:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x81ba) [ 195.005674][ T7437] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.014341][ T7439] team0: Port device team_slave_0 added [ 195.031829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.045174][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.058260][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.065856][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.073767][ T7447] device bridge_slave_0 entered promiscuous mode [ 195.094871][ T7439] team0: Port device team_slave_1 added [ 195.106887][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.117036][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.125485][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.132553][ T7441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.140685][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.149067][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.157402][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.164458][ T7441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.172073][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.181004][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.188100][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.195832][ T7447] device bridge_slave_1 entered promiscuous mode 16:38:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x800000000105082) r1 = memfd_create(&(0x7f0000000480)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@v2={0x3, 0x2, 0x0, 0x0, 0x3f, "a87dfc808921c756af19b4767e7aee4d8069e09a74b17113809a06b584218d1f83389cff3958b86d3a5d3a76e60c6650ee16be9bfd5c622100915dbe359a5e"}, 0x49, 0x1) pwritev(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x102000000) [ 195.222145][ T7447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.236801][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.252354][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.274168][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.285701][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.294028][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.302715][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.311674][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 16:38:02 executing program 0: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) [ 195.346828][ T7447] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.412540][ T7439] device hsr_slave_0 entered promiscuous mode 16:38:02 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x0, 0x800) sched_setaffinity(0x0, 0xfea2, &(0x7f00000001c0)=0x7) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={0x8}, 0x8, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x80000000, {0x3, 0x4, 0x0, 0x0, 0x7ff, 0xf1c9}, 0x0, 0x3}, 0xe) splice(r1, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x7ff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x3, 0x6) sendto$unix(r1, &(0x7f0000000100)="b60bdf1fb255a378c2f462d425f7e5160e96f0f6b80546b373592d56241216d89d3cc6c81a2a70139721af1d65b40fb5a2c2a9a2c1a7eb48073c4a4a909c264d0dc150df65f14c207afc4652df01e96db2f81e4bca087a1632f9fed37ad78a8ac934bf432c5386c2487e39660cfd7e10a9", 0x71, 0x40, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x3}, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 195.460687][ T7439] device hsr_slave_1 entered promiscuous mode [ 195.525422][ T7437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.536330][ T7437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.550933][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.557983][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.565995][ T7451] device bridge_slave_0 entered promiscuous mode 16:38:02 executing program 0: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) [ 195.573958][ T7451] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.581125][ T7451] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.588698][ T7451] device bridge_slave_1 entered promiscuous mode [ 195.597736][ T7447] team0: Port device team_slave_0 added [ 195.604597][ T7447] team0: Port device team_slave_1 added [ 195.631792][ T7493] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 195.642547][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.651325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.659506][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.668519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.676989][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.698163][ T7443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.792942][ T7447] device hsr_slave_0 entered promiscuous mode [ 195.830770][ T7447] device hsr_slave_1 entered promiscuous mode [ 195.905345][ T7443] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.913842][ T7451] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.925772][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.933715][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.941358][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.949722][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.958107][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.965156][ T7446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.973222][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.983719][ T7437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.994952][ T7451] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.020755][ T7451] team0: Port device team_slave_0 added [ 196.027345][ T7451] team0: Port device team_slave_1 added [ 196.041698][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.050067][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.059125][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.068590][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.075681][ T7441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.083628][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.134974][ T7451] device hsr_slave_0 entered promiscuous mode [ 196.180736][ T7451] device hsr_slave_1 entered promiscuous mode 16:38:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000010122ee3cfd655b5e94a648458f6ac50778067e6f4d15a9f0128b9dbdb55c7593f6454c2aa6aec658b65fad90e884e8a740200000050cad93f15ee2aeb0515395e39eacd5be3bd5d1bae74531d98fc59df400fff9aa885c28c01652d2d80df9ffd4f36a8b53b2900958d4f38ea455d569bd6b041f966634008490fcdd8d6"], 0x80) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) [ 196.286122][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.299885][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.308586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.317636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.333024][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.345344][ T7439] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.359470][ T7443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.372114][ T7443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.397600][ T7447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.412811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.421603][ C0] hrtimer: interrupt took 43752 ns [ 196.427009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.435965][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.444479][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.452805][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.461210][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.469449][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.477795][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.507204][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.516276][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.531181][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.538275][ T7441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.552451][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.564370][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.576182][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.583296][ T7441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.597160][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.605366][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.619046][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.637819][ T7447] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.669271][ T7443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.680870][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.689752][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.704432][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.715556][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.743466][ T7451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.760775][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.768618][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.811558][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.819974][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.843243][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.857796][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.864913][ T7446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.877950][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.905810][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.935892][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.943019][ T7446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.962180][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.984491][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.998519][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.008222][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.034812][ T7439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.061804][ T7439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.103614][ T7447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.114318][ T7447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.141411][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.149335][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.157887][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.171822][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.180160][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.199586][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.208153][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.216808][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.225157][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.233364][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.241794][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.249916][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.258205][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.265722][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.274014][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.281492][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.297048][ T7447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.306380][ T7451] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.333954][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.347216][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.357455][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.366457][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.373556][ T7441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.381581][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.389968][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.398314][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.405392][ T7441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.413219][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.433288][ T7451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.444514][ T7451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.456300][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.464852][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.474853][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.483411][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.499245][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 16:38:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{}, {r1, 0x20}], 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000200007021dfffd946f610500020000001f00000000000100080008000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 16:38:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) dup3(r1, r0, 0x0) [ 197.518073][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.529193][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.543165][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.554416][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.566306][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.577633][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.590486][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.612623][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:38:04 executing program 4: [ 197.901551][ T7451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.947764][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.977211][ T7544] erofs: read_super, device -> /dev/loop5 [ 197.983629][ T7544] erofs: options -> acl,nouser_xattr,fault_injection=0x0000000000000000,obj_role=^#vmnet1'^,context=unconfined_u, [ 197.997170][ T7544] erofs: cannot find valid erofs superblock 16:38:05 executing program 5: 16:38:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x1a0ffffffff}}}, 0xf8}}, 0x0) 16:38:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 16:38:05 executing program 0: syz_emit_ethernet(0x34c, &(0x7f0000000100)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x12, 0x0, 0x0, @multicast1=0xe0000002}}}}}, 0x0) 16:38:05 executing program 4: 16:38:05 executing program 2: 16:38:05 executing program 3: 16:38:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @dev}}}, 0x9c) 16:38:05 executing program 4: 16:38:05 executing program 0: 16:38:05 executing program 1: 16:38:05 executing program 5: 16:38:05 executing program 3: 16:38:05 executing program 4: 16:38:05 executing program 5: 16:38:05 executing program 0: 16:38:05 executing program 3: 16:38:05 executing program 4: 16:38:05 executing program 1: 16:38:06 executing program 2: 16:38:06 executing program 5: 16:38:06 executing program 0: 16:38:06 executing program 3: 16:38:06 executing program 1: 16:38:06 executing program 4: 16:38:06 executing program 0: 16:38:06 executing program 3: 16:38:06 executing program 1: 16:38:06 executing program 5: 16:38:06 executing program 4: 16:38:06 executing program 2: 16:38:06 executing program 0: 16:38:06 executing program 3: 16:38:06 executing program 1: 16:38:06 executing program 5: 16:38:06 executing program 4: 16:38:06 executing program 2: 16:38:06 executing program 5: 16:38:06 executing program 0: 16:38:06 executing program 3: 16:38:06 executing program 2: 16:38:06 executing program 1: 16:38:06 executing program 4: 16:38:06 executing program 3: 16:38:06 executing program 2: 16:38:06 executing program 5: 16:38:06 executing program 4: 16:38:06 executing program 0: 16:38:06 executing program 1: 16:38:06 executing program 3: 16:38:06 executing program 2: 16:38:06 executing program 0: 16:38:06 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4aa9d3cc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) mprotect(&(0x7f000010e000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x24180) read(r0, &(0x7f0000000200)=""/30, 0xfffffe80) 16:38:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x800000000105082) r1 = memfd_create(&(0x7f0000000480)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x102000000) 16:38:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 16:38:06 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4aa9d3cc) getpgid(0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000016c0)="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") memfd_create(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x24180) read(r0, &(0x7f0000000200)=""/30, 0xfffffe80) 16:38:06 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="e5a072e1cd3c", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x34000, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 16:38:06 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f0000000080), 0x900000, &(0x7f00000000c0)={[{@nodiscard='nodiscard'}, {@commit={'commit', 0x3d, 0x4}}, {@space_cache_v1='space_cache=v1'}, {@compress_force='compress-force'}, {@nossd='nossd'}, {@treelog='treelog'}, {@inode_cache='inode_cache'}, {@datasum='datasum'}], [{@seclabel='seclabel'}, {@subj_role={'subj_role', 0x3d, '\x86GPL'}}]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x64b, 0x4, &(0x7f0000000180)}) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) socket$tipc(0x1e, 0x2, 0x0) accept4$llc(r0, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x10, 0x80000) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x694c, 0x1}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000480)=""/245) syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') connect$rxrpc(r1, &(0x7f00000005c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r2, 0x7cf02511, 0x0, 0x0, 0x0, @ib={0x1b, 0x87, 0x1, {"c55bfa5f4ca177204ad54b3ef8c7089f"}, 0x100000001, 0x7, 0x7}, @in6={0xa, 0x4e20, 0x0, @local, 0x80000000}}}, 0x118) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000740)={0x8, 0x1, @value=0x1}) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000780)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000007c0)={0x0, @aes128, 0x0, "e687cd28a018343a"}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1) accept4(r3, &(0x7f0000000800)=@un=@abs, &(0x7f0000000880)=0x80, 0x80800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000008c0)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x40802, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000d40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f00000009c0)={0x32c, r5, 0x120, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x124, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6317}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x830}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x370}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x36}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x198b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b17e0b7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33b}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32f7cf4a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x847}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc00000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x571cdbca}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x24040091}, 0x4004000) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000d80)={0xa, 0x4, 0xfa00, {r2}}, 0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000dc0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000e00)={0x100000000}) open(&(0x7f0000000e40)='./file0\x00', 0x80840, 0x80) [ 199.861993][ T7663] page:ffffea00025ec400 count:0 mapcount:0 mapping:0000000000000000 index:0x0 16:38:06 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000f7ff0100070001047f007f00bcf98700090077eb"], 0x18) 16:38:07 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) clock_gettime(0x2, &(0x7f0000000100)) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000580)=""/246) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x40, 0x5, &(0x7f0000000300)=[{&(0x7f00000010c0)="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", 0x1000, 0x96}, {&(0x7f00000001c0)="c8808d09e41b0834f7ca06868dc617db11e82afe06780b5f", 0x18, 0x100}, {&(0x7f0000000200)="2f00925db7a6b8868c27f393f56467ab6a5bca2aa4763f8d4ad0eeef02f153569a1295f5ac2dac1fe7d088ec73ae85e6899eac204889", 0x36, 0x9}, {&(0x7f00000020c0)="dc06e507010fe0ce53ceb9fd182010889cd5cd83b75443090af3b29d943004355183a0a04dd376e54598b85705d7ed7565c355ea02150f8814247ae442de5f4d18a0070a31987d1570e8ad3a4786057ae1ff51ed747f565157d2e52c0c5cf21dc82ed52ce6db0c3471597e2b725e4c5cf285826cf3f0462e9d058d6568bccb514f060990f4511d92be253bab26067b63801e640011bd8943eb8633cf790f72e4ad69a4ceb47ffe797f2220bdefc1eb691df2b143e9e58ab53e53ef4f61da2e2095fe443e75eaae1a7f4fd7e97ad22a88b0a2cdc94c80c99d8f31ac09d6f2f3ffcad6881982655b338ba66621f538a5846ff6847c8547bda2985252a1f503562a315339d75725b2cae18af79605f707a615214b65f2aa3f829eb4810738e9d562220935ca205fd16e22974df439f0effe26ac6db38b5c4943498ac507ad4331c7453e25c0e3450b21754ab2d7c7ff76a53aa607c11d2a63a7bdae22e5ceba650273c074101f85973feb82d1f380276e8ec9313d0fc791b1eef4afc60290b61433e0bf080ba804b9272efae6b98e3d4b55d60baf7276fa35dd8655f6ac2a38cc9388ecc031ea5e68ff5d9c6c2eaad713a14c9fe36986c6801c348d79a53467e074794d12c1013e204f740e34c94593ed0d3c64a21abaa58b7b786bba7e2936058274c1d11ec72025fcd79aed641205933bbee2682348f975f0c8190c63a61d8b229d387611856963c5d78f1c582883c96d06423c63d55d9ebd29a1343bca874fcfbc4b504bf84f62e53a2440a8fbccde3acace7390944b0447adb0e11ee229f2e1527d478048800876ef697195909ab6df4c2bc8c46c038d95644970b874bd0652ac20ae08d1fef9b67677ac3b06df4302d840442c65638ea1339d206624845dbf1169d18be33e77f787ad07ccd97e2c7af636a90b20b88dcd4ca8de2997ee8a64f5de16e10af410a5c6338f3d3230b2ae92dada34b140b0bfd142c9788a9df5dcd021cbca4492faf176b2b8eb0481c4d2f9fcb905b2476dbe5401749d8511e43d1445f5976bd83749a0b417e184a59a85a0d9c2e2dc506310830a6a667384ea40a563b11da34772f412e9d7fc249286a9144f7b60f7101fa118c6de7e3356a35f6c4b80b24e84771d0c008baf0df41000718a149dccc2edf116e72e179befcca91052e7f5f5ef7f90ee14d1d75688ad62d7d6f9cdc70622a0c9420b6799e6c4e83385021fea1ece6f1f5cdf75b07b631c73f786a0b31080976bf77fe524db42660b0d0a658c36d2b138809159561383846c7e1c5de72c81c0814cb4b50f0a4571b91cf68d502cd90218fe7fa6290d94c50bfc9f330c6e9bce54e8195ef89833266f06ebfab9497f9c42a33649a0f92bbe0d0d31925bf681efa13cb449a218b4a5920207620a6b6e9bb83bba02dad166bb49c3b76b91a0b6bd9f9761421a51382272610aac41444fc1acef38153e862636e088cc37e32363a7818b8f0c63050600f627107d9f185f94b04d8f24112164dfc30e653b57d9fff089c77fb5e5137784c243a8dbbdf1bec48c044b401c2e2b8a8b797630ef6bdf47a9fb7878f4e2aa4a9a4ee87f372bcbf930e69a34ea6253ca2a6fe9d87d88dcf8115497aafdff4a2067c4437ef015f6bbbbaba07ab102150c347e9d9fb1907d7f611a9f748248f4d501b3ff65ddf0a2712af2e2444fc6ea929d81e06391dec13e4b88b7f463305f40e5b90570320525124501241f3d3b9a0c67b433505e48eab23a620a5acefeb83c27df9914d1d2ed099ca8098ec7ce93aadb3c0d271a9839ba44976551f165355c995fa5c25fa2467cf12fd49372cd00cafd4c95bcecf20421047668c3b23362f658ab5311cade15d9593a77938d28d700fdb02dc2c40dd6b49524ea1536f65e7825b9a5d0148e23a0a5a0a9045b7f98175d8426842b210142cef66abec5066fd0ed3d961977625ff23180f79c0b7b8bbf9916afdf8f56cde4c00e65ce8b8dc2c015ab21385cf5a6e8f99c03a59f0effbcab7c620f40dd070da3e9c33c6a7dab265f1c74938e30206c9433f1f5fc30abccabfb80c66b00916cb335597b2a14ae1d18a0a1cb825f4de09a2bfe676fc74cd3386b5ab881b39d900ac5e648fb7fa1a5197219bf8730fa2333ccbb606e518224bb433c804052936f55515e18990c404cc6d2c95e53f39a51b8c43d8f5f862a40593893b131fb709b650a8dcd2ca5f36fd1e8464f056c8e46c43ac009bcddf17004893eae074ccdb7160e8319ac41cd6a020412382e32a88eef4f27c5e69db2a73cdd243771ca4cc23706e2c35593a20b79683168c97be2ae32070ba945ec3d4f59ba757a3dda09e07ec08c5ba2117c82e7aa934ef8efea7d314f3377eff06d86cf7be779115ce530b07852e8b81692c20053571f00ffa19311ee2adf6a9508379fd54c63fe6e77ca670cace6d8a77a451a937ab8f136fac1524e6a44dd7eded98c02791e545e585e3432d5fc67bae8b4987bea4ace776e583caa40974b108bd623b711ca4f05af5c3dd2403ea9632684d8baa91a70e3c4bd613796addf839fddcea7355a3c1431e6da6fb8a1bfbfc610fa5fa9c6b7560db59c8929cb08c6b15a240438a598f01fc9a8ce958e07751a184f9d9d0f81f55569601f9c4ae73feba8a6102c2cd067edec2655a1192a1cf94b07e2a084d9b8473df20c9a5590565e9f570e251d5bcd9ce6249acabedca8e396fbaccb3f5852b4631af5541a837a127933146d575ccea380a11c646a6d4d69923f754cfb0735fc8bd1597dad68502ef04626d883410241708a7cadf0e6da66f67536efc3c65e60a94a5ea9b7626466145cca730a0fbe1bbad0b71cf5d1a03ff484ae3ad613fb4751fb37d7750a67779330fa8a2a27d5851242ffe6aa15f737ebf3974ba0fa707144902fc83d6e542fd27f5981141a014f78f3bbb2c1c18da1b77e6f72b7ba8af5cc12d9d728680c93ff7c54182a7954e6177b82d2244aaa6bcbcc3dc3bfd593135295632f03e08a99d55c8c1ede621464aabbbe383657278bb27a6f6e80206bb9a6b064e4009f555c53849b93d17f4a53ac487fd9c6fb84c62f879e5e2a8aea136121e4a4879bcd18e7203a5bd38c250acb729e0e005b50e4157e454d9b8a045d93d0c8e14b0720f5a57064acbdc654f73491b41dd3400b5ca759778fa1fe23b073779625f3dc242abfb0eab12c9ed03ede6ad7ba4bc8dee74dbef0196bf9fa3c4c0a042e0ce53f260e6f6b274c32f92bf7ca4d208f8b9d2977e7871a8b2ac96997016ddf51401e2fd7c03ffb4a0e723ad8503c16a0e5e89a4a66fa11724b14c3a1c75dff903fa0672eb9f78ec71512e92afee8d63ee351c12b7a669ee6a2e8ac23c2bb1a1d35d6818f83de0713c585f05025d5a1d967060e719005a68fc127d2c6e2516b17b9f6055959b0caaa95525294166906a4c0666556b22e614a278d00f036724be28caddfea33c043f71aa9b3bb2fb773abfcb5e66885be49dcc8e28f6aea0fe9f63f47f98a25aa721d0377f183e871e20c67016bfd8810e886760d92ea412b09ae299eaab4b67e95ea6e9b0ad50e4254029bbfbb256c7c2a097f533459d4bef13dc5db571a622c48753a9d7add696f6e9c5a4ed26583bb672f812f84fc5148fb89e0ba8e709ebf0b5c8d6c3af413ae5dc52ba614a40daf03c2a86f1c8537faf378054bfdf614da04203166cf9359e453d1307e95ebdcf4cea1c25d64e561d65de0a65ae4f1260591c6bc28faef22a96530146cc27427ce7e028436c98080ed13102d96d98ecb111ac191119fc58194122da55bae84c9cc6784358a1e646ded916eb15365e1aaca59da9e0ea47b720897968cf879ab27f780198b2efb481e5fbb5335958b42f5a39cacf12d8d4b282245401dcafa73fa932a9388bd1da2e8cd728161c455f0981be167d0cabada691af10532efce325215a91fd481fc2cb9b2c9efcfb4a7db5fc74fb62f891ea6f7e2bf4d8daaf0d560afc7d27997304aa64bba76bc4ff442c92f792d84796416b06e1b3b943c61e7e82d6109803edfb28a39a239ea5565c58ebedca292e74e865cf146bc56ec99bce72d46fd1a6db3d99787f03810568c05570440009bed542f328265e87ecfd2cb794190bb8f25bffb5d01faa54e444382b422188d74be0e1abc968ef9f9c8e03f88dc8465d554b36623812552ce0c89677c57937d971eb51d4c442c74c0727fdf4849b0fbc24b3167368d26cc6d0d87fc892f0b459e7b7f201ec038225a44071b489c325ed3c3f36f9c943aff3723245324c43ec0e5da51340bee7132e7c61b071ef96608f5d0baf14cb5fc7eb211da01f3960dc4c9873d2ce32c5ec6a5b61d2c99a9a41898bff309b5e0d8fe9586351580d3cdcb4a6b1b19bc88572278284c7c52b2b6f03b1663a541ba1c44da3ff017657e18cfa48a13eef4de3b3ef8a57bd242b8c85bf6c74022454e2e0c97ae06fce82fa2809b944b1c4805244a87e3bc10c1bf34c12f20eaa6772e0b46a20c40718a849d1e28ca19d2aabac7264c62e85132b8e5c1fc90434614af0e9344f6bef5198dfcb6cca4e70c4b765255d163f8665b4af955dafc0316f3a924d2cfa463a5e5d90f6d23bd3b54109cbd3b392f81aeca08318f7b67fbff0e32d066b833d2d32d625dc37073897504afc2df5ae6a7ed1f8b49734a043fbf219c5d22854da8c6d177d30517994b2cfae34b89762bbd01f973b098f2c4d05c8b9e7f945c30f913d036569546250a1c2cfa21f6c98ffa2fa9ab665688680d04e72e0ab8e6cd18e498331987baf6f0cdbf33bf4f34a872432d0f9eec51a1b6cca1bece0bf3a081db99926ff8e5156d3805059bbcb6878466acb0021c18cbdff268027ce09a7c2586403bedb83a94369a14926aa08204f4289fec8d1d5d077ca40c4cf4b17cb22876100f5a78a84b17a0375a6b657fdeb2a622608b17237f7e7e943baf63ac5e684f6a9c4a94432f2c36995892a3a2a26fdce675959f92e3b898550a420b7f7db135d1e395a64d8a82b8959c2bca2e99735bafb1c8331823d9acf7290290ece34e2344b309e192ff218b034e101d95052df00f82739650480182ba20b0b896fe28473104b94e1371e5ee1cc3c0d9d8634c41af039529593a95a7b066f95919ede21ff4e76b4b31da9c18f25861f17f01d437defe3c0f5774e73c82bcb272610eaa65da3ad367748fcd9af9ff8473c110cc1a853eaa08b7d91e2319de033043eb9d053a797b4c8834e59b7bbf24f409e7f87838f62b28ce9e39785531d744df731c59a6b7bc32a770f67183478bed57f7846a2fd96b513fe86e5dee6666021486da9bd5c5e026ac6f9cc684b8863646696e2a0f9f5d7ab52dd5a364a59e34afe213fa618394bd69acb663531d318e6e67cfe4eeb6a4923791d19767a43070c0ed8e8de9ac6795d8ff3025224a7fd3f4e44aaa6d3e08e3dd961614352821e0c1f8aa12ca1eef97538c9c111e775be9e718acf24f639334b60f71f320ed29780dab3779a40cc7059ce2af99577246533fc1db02aa3d5bb650709abeb5507be73f28c7a6afb10354a8a3a1e120cd45289e1e10a3d88ad2c52c44eb58387993e0a4ba249c51dbd3f12dc2f54a1d3bd4cdbf3e1a47b0a0cf04b59538ccca85780bc122cc90ac527de51fbe6bf8ac14810ced51b7496944a40ed35e3d972f51537e8dd8d31efc9ed15066ac21736289221d8a99ed864bd7e2f9f28b6104c9009920b26cefae65fc57980eebc8ea36cf452139a30bb3e6efa0f1c5e551c2b048cfad4097dee0f3492e4cdd4f3108f2d30ab04e7393b1", 0x1000, 0x481f}, {&(0x7f0000000240)="2c325d34b446b8d24c1309cdb06dc7cbc38231d5918860bd827a0c25f21b6083db67994e7dd6e509e1bf38c707904bb857128007e62a6d3fdf29768ea6c3590232378de420b5b41eeeb671fc9e0cc66d10ec6c19d7292248549ca9255b02d085dc27c66641a791d9e6371133081cf8536c44f0fcd3a0e6052c2bc269a5b11794eebaa25d0e2e1bec00df52ae2b252c77f80d9659aa8fe861d55907fbedb55e87e21a98b791833cac199da0f837", 0xad, 0x7ff}], 0x8, &(0x7f0000000740)={[{@gid={'gid', 0x3d, r3}}, {@grpquota='grpquota'}, {@grpquota='grpquota'}], [{@subj_type={'subj_type', 0x3d, '-'}}, {@uid_gt={'uid>', r4}}, {@seclabel='seclabel'}, {@obj_role={'obj_role', 0x3d, '/dev/zero\x00'}}, {@seclabel='seclabel'}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r5}}]}) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000001000)=""/174) [ 199.924795][ T7663] flags: 0x1fffc0000000000() [ 199.936547][ T7663] raw: 01fffc0000000000 dead000000000100 dead000000000200 0000000000000000 [ 199.959985][ T7663] raw: 0000000000000000 ffff888089a8ab00 00000001fffff9ff ffff88805c0e68c0 16:38:07 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x400000000000, 0x3, 0x0, 0x0, 0x401, 0x0, 0xc, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006, 0x20, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x63c9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000440), 0x20) sendfile(r0, r0, &(0x7f0000000100), 0x7f8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) [ 199.997784][ T7663] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 200.033614][ T7663] page->mem_cgroup:ffff88805c0e68c0 16:38:07 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 16:38:07 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@remote}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000006312c7005e19b3901d547ac20000380000000000ff03000000000000000000000000000000000000000040000000000000000000000000000000000000"], 0x6c) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 200.055749][ T7663] ------------[ cut here ]------------ [ 200.061250][ T7663] kernel BUG at include/linux/mm.h:579! [ 200.108996][ T7663] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 200.115120][ T7663] CPU: 0 PID: 7663 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190221 #40 [ 200.124132][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.134296][ T7663] RIP: 0010:generic_pipe_buf_release+0x120/0x160 [ 200.140635][ T7663] Code: bd ff 4c 89 e7 e8 60 44 db ff e8 cb 28 bd ff 5b 41 5c 41 5d 5d c3 e8 bf 28 bd ff 48 c7 c6 e0 97 75 87 4c 89 e7 e8 90 dc e4 ff <0f> 0b e8 a9 28 bd ff 4d 8d 65 ff e9 3d ff ff ff 48 89 df e8 58 f9 [ 200.160240][ T7663] RSP: 0018:ffff888057b47920 EFLAGS: 00010212 [ 200.166314][ T7663] RAX: 0000000000040000 RBX: ffffea00025ec434 RCX: ffffc9001086c000 [ 200.174285][ T7663] RDX: 00000000000311a9 RSI: ffffffff81981742 RDI: ffffed100af68f08 [ 200.182266][ T7663] RBP: ffff888057b47938 R08: 0000000000000021 R09: ffffed1015d05011 [ 200.188367][ T7701] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.190240][ T7663] R10: ffffed1015d05010 R11: ffff8880ae828087 R12: ffffea00025ec400 [ 200.190249][ T7663] R13: 0000000000000000 R14: ffff88809fd0ca40 R15: ffff888099477200 [ 200.190261][ T7663] FS: 00007f1fa28a0700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 200.190270][ T7663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.190278][ T7663] CR2: 0000000000625208 CR3: 000000008dfb3000 CR4: 00000000001406f0 [ 200.190289][ T7663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 16:38:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xff, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x114) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e0021d0a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x1, 0x0) [ 200.190302][ T7663] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.190315][ T7663] Call Trace: [ 200.267196][ T7663] iter_file_splice_write+0x7d1/0xbe0 [ 200.272574][ T7663] ? atime_needs_update+0x5f0/0x5f0 [ 200.278327][ T7663] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 200.284341][ T7663] ? rw_verify_area+0x118/0x360 [ 200.289193][ T7663] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 200.295173][ T7663] direct_splice_actor+0x126/0x1a0 [ 200.300297][ T7663] splice_direct_to_actor+0x369/0x970 16:38:07 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@remote}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c460000002f13cd01000000000000000000020000000d000000000000000000000040000000000000000000006312c7005e19b3901d547ac20000380000000000ff03000000000000000000000000000000000000000040000000000000000000000000000000000000"], 0x6c) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 200.305673][ T7663] ? generic_pipe_buf_nosteal+0x10/0x10 [ 200.311220][ T7663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.317457][ T7663] ? do_splice_to+0x190/0x190 [ 200.322152][ T7663] ? rw_verify_area+0x118/0x360 [ 200.327004][ T7663] do_splice_direct+0x1da/0x2a0 [ 200.331870][ T7663] ? splice_direct_to_actor+0x970/0x970 [ 200.337416][ T7663] ? rw_verify_area+0x118/0x360 [ 200.337483][ T7689] kobject: 'ppp0' (000000000f67531c): kobject_add_internal: parent: 'net', set: 'devices' [ 200.342261][ T7663] do_sendfile+0x597/0xd00 [ 200.342287][ T7663] ? do_compat_pwritev64+0x1c0/0x1c0 [ 200.342301][ T7663] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 200.342314][ T7663] ? put_timespec64+0xda/0x140 [ 200.342333][ T7663] __x64_sys_sendfile64+0x1dd/0x220 [ 200.342347][ T7663] ? __ia32_sys_sendfile+0x230/0x230 [ 200.342367][ T7663] ? do_syscall_64+0x26/0x610 [ 200.361156][ T7689] kobject: 'ppp0' (000000000f67531c): kobject_uevent_env [ 200.361913][ T7663] ? lockdep_hardirqs_on+0x418/0x5d0 [ 200.368253][ T7689] kobject: 'ppp0' (000000000f67531c): fill_kobj_path: path = '/devices/virtual/net/ppp0' [ 200.372877][ T7663] ? trace_hardirqs_on+0x67/0x230 [ 200.372895][ T7663] do_syscall_64+0x103/0x610 [ 200.372912][ T7663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 200.372922][ T7663] RIP: 0033:0x457e29 [ 200.372934][ T7663] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 200.372940][ T7663] RSP: 002b:00007f1fa289fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 200.372952][ T7663] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 200.372966][ T7663] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 200.380704][ T7689] kobject: 'queues' (0000000052eb380c): kobject_add_internal: parent: 'ppp0', set: '' [ 200.383406][ T7663] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 200.383415][ T7663] R10: 0000000102000000 R11: 0000000000000246 R12: 00007f1fa28a06d4 [ 200.383423][ T7663] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 200.383438][ T7663] Modules linked in: [ 200.388171][ T7689] kobject: 'queues' (0000000052eb380c): kobject_uevent_env [ 200.396413][ T7663] ---[ end trace 1ff5c68ec5899f43 ]--- [ 200.403909][ T7698] kobject: 'loop2' (000000009c3fc34b): kobject_uevent_env [ 200.410521][ T7663] RIP: 0010:generic_pipe_buf_release+0x120/0x160 [ 200.410534][ T7663] Code: bd ff 4c 89 e7 e8 60 44 db ff e8 cb 28 bd ff 5b 41 5c 41 5d 5d c3 e8 bf 28 bd ff 48 c7 c6 e0 97 75 87 4c 89 e7 e8 90 dc e4 ff <0f> 0b e8 a9 28 bd ff 4d 8d 65 ff e9 3d ff ff ff 48 89 df e8 58 f9 [ 200.410541][ T7663] RSP: 0018:ffff888057b47920 EFLAGS: 00010212 [ 200.410553][ T7663] RAX: 0000000000040000 RBX: ffffea00025ec434 RCX: ffffc9001086c000 [ 200.410560][ T7663] RDX: 00000000000311a9 RSI: ffffffff81981742 RDI: ffffed100af68f08 [ 200.410568][ T7663] RBP: ffff888057b47938 R08: 0000000000000021 R09: ffffed1015d05011 [ 200.410577][ T7663] R10: ffffed1015d05010 R11: ffff8880ae828087 R12: ffffea00025ec400 [ 200.410586][ T7663] R13: 0000000000000000 R14: ffff88809fd0ca40 R15: ffff888099477200 [ 200.410597][ T7663] FS: 00007f1fa28a0700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 200.410606][ T7663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.410613][ T7663] CR2: 0000000000625208 CR3: 000000008dfb3000 CR4: 00000000001406f0 [ 200.410625][ T7663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.410633][ T7663] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.410639][ T7663] Kernel panic - not syncing: Fatal exception [ 200.411708][ T7663] Kernel Offset: disabled [ 200.653718][ T7663] Rebooting in 86400 seconds..