[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.274362][ T26] audit: type=1800 audit(1572213930.501:25): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.294480][ T26] audit: type=1800 audit(1572213930.501:26): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.359882][ T26] audit: type=1800 audit(1572213930.511:27): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.88' (ECDSA) to the list of known hosts. 2019/10/27 22:05:38 fuzzer started 2019/10/27 22:05:40 dialing manager at 10.128.0.26:34793 2019/10/27 22:05:40 syscalls: 2534 2019/10/27 22:05:40 code coverage: enabled 2019/10/27 22:05:40 comparison tracing: enabled 2019/10/27 22:05:40 extra coverage: extra coverage is not supported by the kernel 2019/10/27 22:05:40 setuid sandbox: enabled 2019/10/27 22:05:40 namespace sandbox: enabled 2019/10/27 22:05:40 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/27 22:05:40 fault injection: enabled 2019/10/27 22:05:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/27 22:05:40 net packet injection: enabled 2019/10/27 22:05:40 net device setup: enabled 2019/10/27 22:05:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 22:07:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/159, 0x9f}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)) 22:07:39 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="48000000140083dab05f9f95274b0a000a840000400403fe0500030001546fabca1b4e7d06a6bd7c8f934eff030000ea", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) syzkaller login: [ 184.840214][ T8842] IPVS: ftp: loaded support on port[0] = 21 [ 184.931962][ T8844] IPVS: ftp: loaded support on port[0] = 21 22:07:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8ce6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b30077f70a7c0f30f66157a96aae000000000800", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ff055339b083cbda58cb88107b05000000000000009800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 185.037013][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 185.182418][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.199017][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.207164][ T8842] device bridge_slave_0 entered promiscuous mode [ 185.222237][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.229607][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.237605][ T8842] device bridge_slave_1 entered promiscuous mode [ 185.268122][ T8848] IPVS: ftp: loaded support on port[0] = 21 [ 185.285531][ T8844] chnl_net:caif_netlink_parms(): no params data found 22:07:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x0) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xfffffffffffffe40, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x9305d4) [ 185.328048][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.363800][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.431334][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.438433][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.459864][ T8844] device bridge_slave_0 entered promiscuous mode [ 185.494407][ T8842] team0: Port device team_slave_0 added [ 185.502563][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.511077][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.519977][ T8844] device bridge_slave_1 entered promiscuous mode [ 185.531088][ T8842] team0: Port device team_slave_1 added 22:07:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev//.\x00', 0x0, 0x0) r1 = dup(r0) utimensat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 185.653783][ T8842] device hsr_slave_0 entered promiscuous mode 22:07:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) [ 185.830063][ T8842] device hsr_slave_1 entered promiscuous mode [ 185.910801][ T8848] chnl_net:caif_netlink_parms(): no params data found [ 185.928017][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.941325][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.964666][ T8853] IPVS: ftp: loaded support on port[0] = 21 [ 185.975803][ T8851] IPVS: ftp: loaded support on port[0] = 21 [ 185.992936][ T8855] IPVS: ftp: loaded support on port[0] = 21 [ 186.022207][ T8844] team0: Port device team_slave_0 added [ 186.048025][ T8844] team0: Port device team_slave_1 added [ 186.056304][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.063795][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.071637][ T8848] device bridge_slave_0 entered promiscuous mode [ 186.117755][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.125249][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.133323][ T8848] device bridge_slave_1 entered promiscuous mode [ 186.221910][ T8844] device hsr_slave_0 entered promiscuous mode [ 186.259295][ T8844] device hsr_slave_1 entered promiscuous mode [ 186.329052][ T8844] debugfs: Directory 'hsr0' with parent '/' already present! [ 186.369153][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.383687][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.492842][ T8848] team0: Port device team_slave_0 added [ 186.545199][ T8848] team0: Port device team_slave_1 added [ 186.621997][ T8848] device hsr_slave_0 entered promiscuous mode [ 186.659431][ T8848] device hsr_slave_1 entered promiscuous mode [ 186.700006][ T8848] debugfs: Directory 'hsr0' with parent '/' already present! [ 186.714659][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.771000][ T8853] chnl_net:caif_netlink_parms(): no params data found [ 186.788565][ T8851] chnl_net:caif_netlink_parms(): no params data found [ 186.849292][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 186.876831][ T1056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.886214][ T1056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.899003][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.907573][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.914942][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.924083][ T8851] device bridge_slave_0 entered promiscuous mode [ 186.935014][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.945109][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.953142][ T8851] device bridge_slave_1 entered promiscuous mode [ 186.967559][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.977423][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.985855][ T8853] device bridge_slave_0 entered promiscuous mode [ 187.017043][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.027720][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.037247][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.046175][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.056221][ T8859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.066294][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.074781][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.083804][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.093802][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.100912][ T8859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.111713][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.121332][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.129886][ T8853] device bridge_slave_1 entered promiscuous mode [ 187.147601][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.160336][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.185167][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.193348][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.201298][ T8855] device bridge_slave_0 entered promiscuous mode [ 187.213313][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.220624][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.228460][ T8855] device bridge_slave_1 entered promiscuous mode [ 187.249887][ T8853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.279714][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.294245][ T8853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.306132][ T8851] team0: Port device team_slave_0 added [ 187.313752][ T8851] team0: Port device team_slave_1 added [ 187.320869][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.334553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.371317][ T8842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.382669][ T8842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.400554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.409944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.418328][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.427790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.436251][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.444710][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.453492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.462595][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.471630][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.479561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.493965][ T8853] team0: Port device team_slave_0 added [ 187.517734][ T8853] team0: Port device team_slave_1 added [ 187.562218][ T8851] device hsr_slave_0 entered promiscuous mode [ 187.599412][ T8851] device hsr_slave_1 entered promiscuous mode [ 187.640053][ T8851] debugfs: Directory 'hsr0' with parent '/' already present! [ 187.649141][ T8855] team0: Port device team_slave_0 added [ 187.656513][ T8855] team0: Port device team_slave_1 added [ 187.720892][ T8853] device hsr_slave_0 entered promiscuous mode [ 187.769283][ T8853] device hsr_slave_1 entered promiscuous mode [ 187.819076][ T8853] debugfs: Directory 'hsr0' with parent '/' already present! [ 187.847877][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.867706][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.960887][ T8855] device hsr_slave_0 entered promiscuous mode [ 188.009338][ T8855] device hsr_slave_1 entered promiscuous mode [ 188.069073][ T8855] debugfs: Directory 'hsr0' with parent '/' already present! [ 188.085482][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.122119][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.130278][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.156817][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.178089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.187309][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.195794][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.202940][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state 22:07:42 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_bp={0x0}, 0x1000, 0x0, 0xaa, 0x0, 0x1, 0x200}, 0x0, 0x8, r0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000740)={0x4, {{0xa, 0x4e23, 0x0, @empty}}, {{0xa, 0x4e20, 0x5, @remote, 0x3}}}, 0x108) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000300)='dummy0\x00') vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r6, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b836f26e80fff0f48bb7a9dbe30fcc0ee3c0d19fc464240758595e7eb33de379d54b1bb38a0e4a0f889ec0c3fba40525614e260a798c62e2171b48742723f0000cde52e8a2eeadce33f9d6de553764b2dc37cd776ae9bc72c0b81fe59309fd1ad681f592a81fc06e67513252392cd38fb", 0x86) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) sendfile(r6, r6, &(0x7f0000000200), 0xff8) r7 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 188.257573][ T8848] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.307968][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.322839][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.342874][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.352170][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.359295][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.367362][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.376199][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.384311][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.394090][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.402866][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.411681][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.422130][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.466815][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.478117][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.501069][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.508302][ T8860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.523184][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.534528][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.552731][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.559926][ T8860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.573242][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.581833][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.590654][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.599613][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.608138][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.616657][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.626758][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.643381][ T8844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.655456][ T8844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.671126][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.682023][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.713254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 22:07:43 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/800], 0x12e) dup2(r3, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) [ 188.724195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.734524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.743649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.752640][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.779381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.799400][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.843860][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.882730][ T8860] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 188.886069][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.910082][ T8860] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [|yz1] on sz1 [ 188.911793][ T8848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 22:07:43 executing program 0: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000040)="6aa23804f49ca0ac9f3ced5a40acd32ae0e409c9dd41718b4635e2", 0x1b}, {&(0x7f0000000080)="ab29b594e272e4140e2ee22879c5b155acc70c12c6337a67c3428ac92f109ca6a3a294874f50ec9da530f7b8c83c37ba0823d84b99c66601beb816f41f7af710c983838e3034cc4d7e2947f24f66ad09545749a34a15da6e49f88abb957f63b5fb6ac784c4c35abf8303e9f6153eebe338c63c0035f6509805bc89b861dbfb7812d2c9", 0x83}, {&(0x7f0000000140)="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", 0x3a4}], 0x3, &(0x7f0000001380)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @broadcast}}}], 0x38}}], 0x1, 0x0) [ 188.952869][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.972263][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.980634][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.989788][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.998162][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.006577][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.026907][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.044567][ T8853] 8021q: adding VLAN 0 to HW filter on device team0 22:07:43 executing program 0: r0 = gettid() ioprio_set$pid(0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1852c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r1, &(0x7f0000000040)) inotify_init() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010000d2fbb71100020000"], 0x3}}, 0x0) recvmsg(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000001500)=""/153, 0x99}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/170, 0xaa}, {&(0x7f0000002700)=""/192, 0xc0}], 0x7}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x42, 0x105}, 0x14}}, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = getuid() sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9d23c109420c966f}, 0xc, &(0x7f0000000280)={&(0x7f0000003840)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000000000008001b00ad5e995a1f000000001900800000f0e9ff5307080739ea34c29453f5f87b70d88752af1c5a9e71ed1322807d6c6def1873c35bb6212317a723bc4f65ee78d2dd295fa7ddd75ab294c21945a0bb3c246ff893cf28bd3439fe1ae3481471133e9ee82a06a0f61869", @ANYRES32, @ANYBLOB="0c00720008004000e000000214004500fe8000000000000000000000000000aadc000400ffed55558b683519b058a05f864bbf59faa5136a3ac136056ec79b911e63fb8a4dfbc4b1fe2bbd228a5586b210510aba2d60d2fa53f888faea142f8324f1571040bd2a89d9794aed1866b041bdd987e8ee01359141f3a91c0acd2279ed8406c6174b1d94cf8b2864e522efa6afbab4053837f89862be2670635cfd584e7154b04f90008c15f5aea68838a5d7c43164f916b62e16bde50831d7b7ec93ccbb84fa75ed018ce5ae4b9acb19a249674308be1cf11d65277524d339a574726415fa4def45c828fcd67c1dd5da9912129c063908000e00", @ANYRES32=r8], 0x6}, 0x1, 0x0, 0x0, 0x4}, 0x4004050) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)) write(r2, &(0x7f0000000600)="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", 0x1e0) sendfile(r2, r3, 0x0, 0x7fffffa7) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 189.078106][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.087273][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.117491][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.139892][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.148588][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.189913][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.197011][ T8861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.207859][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.228095][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.242608][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.249745][ T8861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.263955][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 189.263969][ T26] audit: type=1800 audit(1572214063.491:31): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=22 res=0 [ 189.267628][ C0] hrtimer: interrupt took 45365 ns [ 189.278906][ T26] audit: type=1804 audit(1572214063.491:32): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir111902423/syzkaller.BcWcsP/4/file0/file0" dev="loop0" ino=22 res=1 [ 189.331715][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.348765][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.365398][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.374123][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.381228][ T8861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.390065][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.398676][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.407201][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.414392][ T8861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.422225][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.431500][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.440195][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.449351][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.479188][ T8902] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 189.491814][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.513511][ T8902] FAT-fs (loop0): Filesystem has been set read-only [ 189.513599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.521810][ T8902] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 189.536870][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.556720][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.565878][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.575768][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.584853][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.593648][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.602599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.611460][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.620566][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.628985][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.637307][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.646414][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.663035][ T8855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.675274][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.699005][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.707327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.719454][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.727257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.741340][ T8853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.752757][ T8853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.773738][ T8851] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.818204][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.827122][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.836800][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.851405][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.895526][ T8914] device nr0 entered promiscuous mode [ 189.921288][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.939743][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.947904][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.967329][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 22:07:44 executing program 2: clone(0x27ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:07:44 executing program 0: r0 = gettid() ioprio_set$pid(0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1852c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r1, &(0x7f0000000040)) inotify_init() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010000d2fbb71100020000"], 0x3}}, 0x0) recvmsg(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000001500)=""/153, 0x99}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/170, 0xaa}, {&(0x7f0000002700)=""/192, 0xc0}], 0x7}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x42, 0x105}, 0x14}}, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = getuid() sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9d23c109420c966f}, 0xc, &(0x7f0000000280)={&(0x7f0000003840)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000000000008001b00ad5e995a1f000000001900800000f0e9ff5307080739ea34c29453f5f87b70d88752af1c5a9e71ed1322807d6c6def1873c35bb6212317a723bc4f65ee78d2dd295fa7ddd75ab294c21945a0bb3c246ff893cf28bd3439fe1ae3481471133e9ee82a06a0f61869", @ANYRES32, @ANYBLOB="0c00720008004000e000000214004500fe8000000000000000000000000000aadc000400ffed55558b683519b058a05f864bbf59faa5136a3ac136056ec79b911e63fb8a4dfbc4b1fe2bbd228a5586b210510aba2d60d2fa53f888faea142f8324f1571040bd2a89d9794aed1866b041bdd987e8ee01359141f3a91c0acd2279ed8406c6174b1d94cf8b2864e522efa6afbab4053837f89862be2670635cfd584e7154b04f90008c15f5aea68838a5d7c43164f916b62e16bde50831d7b7ec93ccbb84fa75ed018ce5ae4b9acb19a249674308be1cf11d65277524d339a574726415fa4def45c828fcd67c1dd5da9912129c063908000e00", @ANYRES32=r8], 0x6}, 0x1, 0x0, 0x0, 0x4}, 0x4004050) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)) write(r2, &(0x7f0000000600)="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", 0x1e0) sendfile(r2, r3, 0x0, 0x7fffffa7) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 189.989257][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.996612][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.015193][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.025020][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.044490][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.051653][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state 22:07:44 executing program 2: semop(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clock_gettime(0x0, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') fcntl$getownex(r5, 0x10, 0x0) [ 190.247310][ T8931] devpts: called with bogus options [ 190.297930][ T26] audit: type=1800 audit(1572214064.521:33): pid=8930 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=23 res=0 [ 190.347249][ T8853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.400345][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.408263][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.411585][ T26] audit: type=1804 audit(1572214064.591:34): pid=8930 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir111902423/syzkaller.BcWcsP/5/file0/file0" dev="loop0" ino=23 res=1 [ 190.494265][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.508350][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.517930][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.529993][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.537801][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.551894][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.599503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.612273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.623299][ T8943] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 190.634999][ T8943] FAT-fs (loop0): Filesystem has been set read-only [ 190.642756][ T8943] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 190.664116][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.676363][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.714119][ T8851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 22:07:45 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000080)) 22:07:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfffffffe) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xfffffffffffffff7}, 0x8) close(r0) [ 190.811855][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.959037][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 190.965260][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 191.035211][ T8934] devpts: called with bogus options [ 191.078978][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 191.084792][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:07:45 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev\x00sg\x00', 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) ppoll(&(0x7f0000000040)=[{r1}, {r0, 0x9103}], 0x2, 0x0, 0x0, 0x0) 22:07:45 executing program 0: r0 = gettid() ioprio_set$pid(0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1852c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r1, &(0x7f0000000040)) inotify_init() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010000d2fbb71100020000"], 0x3}}, 0x0) recvmsg(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000001500)=""/153, 0x99}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/170, 0xaa}, {&(0x7f0000002700)=""/192, 0xc0}], 0x7}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x42, 0x105}, 0x14}}, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = getuid() sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9d23c109420c966f}, 0xc, &(0x7f0000000280)={&(0x7f0000003840)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000000000008001b00ad5e995a1f000000001900800000f0e9ff5307080739ea34c29453f5f87b70d88752af1c5a9e71ed1322807d6c6def1873c35bb6212317a723bc4f65ee78d2dd295fa7ddd75ab294c21945a0bb3c246ff893cf28bd3439fe1ae3481471133e9ee82a06a0f61869", @ANYRES32, @ANYBLOB="0c00720008004000e000000214004500fe8000000000000000000000000000aadc000400ffed55558b683519b058a05f864bbf59faa5136a3ac136056ec79b911e63fb8a4dfbc4b1fe2bbd228a5586b210510aba2d60d2fa53f888faea142f8324f1571040bd2a89d9794aed1866b041bdd987e8ee01359141f3a91c0acd2279ed8406c6174b1d94cf8b2864e522efa6afbab4053837f89862be2670635cfd584e7154b04f90008c15f5aea68838a5d7c43164f916b62e16bde50831d7b7ec93ccbb84fa75ed018ce5ae4b9acb19a249674308be1cf11d65277524d339a574726415fa4def45c828fcd67c1dd5da9912129c063908000e00", @ANYRES32=r8], 0x6}, 0x1, 0x0, 0x0, 0x4}, 0x4004050) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)) write(r2, &(0x7f0000000600)="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", 0x1e0) sendfile(r2, r3, 0x0, 0x7fffffa7) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 22:07:45 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) close(r3) 22:07:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004800)=[{&(0x7f0000000100)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="8f", 0x1}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x20}}], 0x18}], 0x1, 0x0) 22:07:45 executing program 4: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clock_gettime(0x0, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8544}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffff67}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008001}, 0x40800) fcntl$getownex(r5, 0x10, 0x0) 22:07:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)="87"}) [ 191.300932][ T8985] devpts: called with bogus options [ 191.385348][ T26] audit: type=1800 audit(1572214065.611:35): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16545 res=0 22:07:45 executing program 2: 22:07:45 executing program 5: 22:07:45 executing program 3: 22:07:45 executing program 1: [ 191.756478][ T26] audit: type=1804 audit(1572214065.941:36): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir111902423/syzkaller.BcWcsP/6/file0/file0" dev="sda1" ino=16545 res=1 22:07:46 executing program 5: 22:07:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32, @ANYBLOB="0000000000000000fc80000060000100753332005800020014000b0000000000000000000000000000000000400006003000010000000000000019000000000000000000000000000000000000000000000000001300000000000000f8fbac32c9712b8c22e1e9d77ba189c7460999d8f31a44af4c7a938966d5e87d55e05dae3332c116fa93f45e2ed1edb0c997709ac6c6"], 0x84}}, 0x0) 22:07:46 executing program 3: 22:07:46 executing program 0: 22:07:46 executing program 5: 22:07:46 executing program 1: [ 192.097062][ T8999] devpts: called with bogus options 22:07:46 executing program 4: 22:07:46 executing program 2: 22:07:46 executing program 3: 22:07:46 executing program 5: 22:07:46 executing program 3: 22:07:46 executing program 2: 22:07:46 executing program 1: 22:07:46 executing program 4: 22:07:46 executing program 0: 22:07:46 executing program 5: 22:07:46 executing program 3: 22:07:46 executing program 1: 22:07:46 executing program 2: 22:07:46 executing program 5: 22:07:46 executing program 4: 22:07:46 executing program 0: 22:07:46 executing program 1: 22:07:46 executing program 3: 22:07:46 executing program 2: 22:07:47 executing program 1: 22:07:47 executing program 0: 22:07:47 executing program 3: 22:07:47 executing program 5: 22:07:47 executing program 4: 22:07:47 executing program 2: 22:07:47 executing program 1: 22:07:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg$inet(r1, &(0x7f0000001d80)=[{{&(0x7f0000000380)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x40}}], 0x1, 0x0) 22:07:47 executing program 3: 22:07:47 executing program 5: 22:07:47 executing program 2: 22:07:47 executing program 4: 22:07:47 executing program 1: 22:07:47 executing program 0: 22:07:47 executing program 3: 22:07:47 executing program 4: 22:07:47 executing program 2: 22:07:47 executing program 1: 22:07:47 executing program 5: 22:07:47 executing program 0: 22:07:47 executing program 4: 22:07:47 executing program 3: 22:07:47 executing program 2: 22:07:47 executing program 1: 22:07:47 executing program 5: 22:07:47 executing program 0: 22:07:47 executing program 4: 22:07:48 executing program 2: 22:07:48 executing program 1: 22:07:48 executing program 3: 22:07:48 executing program 5: 22:07:48 executing program 4: 22:07:48 executing program 0: 22:07:48 executing program 1: 22:07:48 executing program 2: 22:07:48 executing program 5: 22:07:48 executing program 3: 22:07:48 executing program 0: 22:07:48 executing program 4: 22:07:48 executing program 1: 22:07:48 executing program 5: 22:07:48 executing program 2: 22:07:48 executing program 3: 22:07:48 executing program 4: 22:07:48 executing program 0: 22:07:48 executing program 1: 22:07:48 executing program 2: 22:07:48 executing program 3: 22:07:48 executing program 5: 22:07:48 executing program 4: 22:07:48 executing program 0: 22:07:48 executing program 1: 22:07:48 executing program 2: 22:07:48 executing program 3: 22:07:48 executing program 5: 22:07:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000340)={"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"}) 22:07:49 executing program 0: 22:07:49 executing program 1: 22:07:49 executing program 3: 22:07:49 executing program 5: 22:07:49 executing program 2: [ 194.951189][ T9184] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 22:07:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r0 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) 22:07:49 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xa1a3f945407a2941) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000440)={0x0, 0xffffffff}) 22:07:49 executing program 1: getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000180)) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 22:07:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000004800)=[{&(0x7f0000000100)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="8f", 0x1}], 0x1, &(0x7f0000000500)=[@prinfo={0x18}], 0x18}], 0x1, 0x0) 22:07:49 executing program 2: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)) socket$inet_smc(0x2b, 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x1) inotify_init() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 22:07:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000001c0)='syz', 0x3) write$binfmt_misc(r1, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$system_posix_acl(r1, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000000c0), 0x24, 0x0) dup3(r0, r1, 0x0) 22:07:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a400000000", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:07:49 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080), 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 22:07:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 22:07:49 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:50 executing program 4: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080), 0x0) shmdt(0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'ipvf\x00\x00\x00\x00\x94\x00'}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 22:07:50 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) pipe(0x0) socket$inet6(0xa, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x44ee) [ 196.023163][ T26] audit: type=1800 audit(1572214070.251:37): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16524 res=0 [ 196.133736][ T26] audit: type=1804 audit(1572214070.281:38): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir953701388/syzkaller.jfjNPO/21/file0" dev="sda1" ino=16524 res=1 [ 196.159467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 196.165787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 196.166824][ T26] audit: type=1804 audit(1572214070.281:39): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir953701388/syzkaller.jfjNPO/21/file0" dev="sda1" ino=16524 res=1 [ 196.281429][ T26] audit: type=1804 audit(1572214070.511:40): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir953701388/syzkaller.jfjNPO/21/file0" dev="sda1" ino=16524 res=1 22:07:51 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 22:07:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 22:07:51 executing program 1: msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) 22:07:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x20000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0344e9ff0200600000000000fff5", 0xe, 0x0, 0x0, 0xfffffffffffffef0) 22:07:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:51 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r5) [ 196.903732][ T26] audit: type=1804 audit(1572214071.131:41): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir472225027/syzkaller.rDr9LQ/18/bus" dev="sda1" ino=16530 res=1 [ 197.011251][ T26] audit: type=1804 audit(1572214071.241:42): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir953701388/syzkaller.jfjNPO/23/bus" dev="sda1" ino=16585 res=1 [ 197.051535][ T26] audit: type=1804 audit(1572214071.271:43): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir472225027/syzkaller.rDr9LQ/18/bus" dev="sda1" ino=16530 res=1 [ 197.212912][ T26] audit: type=1804 audit(1572214071.441:44): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir953701388/syzkaller.jfjNPO/23/bus" dev="sda1" ino=16585 res=1 22:07:52 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x420000015001}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags}) 22:07:52 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffbfffe) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x108000400000003a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) write$binfmt_misc(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x44ee) 22:07:52 executing program 0: syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 22:07:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') sendfile(r1, r0, 0x0, 0x100000) 22:07:52 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a400000000", 0x1c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe04, 0x0, 0x0, 0x0, 0x22c}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:07:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") 22:07:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2200, 0x0) pipe(0x0) close(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x44ee) [ 198.512092][ T26] audit: type=1800 audit(1572214072.741:45): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16598 res=0 [ 198.572362][ T26] audit: type=1804 audit(1572214072.741:46): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir472225027/syzkaller.rDr9LQ/19/file0" dev="sda1" ino=16598 res=1 22:07:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x100000) 22:07:53 executing program 5: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080), 0x0) shmdt(0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 22:07:53 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffbfffe) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x108000400000003a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) write$binfmt_misc(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x44ee) 22:07:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:53 executing program 5: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080), 0x0) shmdt(0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 22:07:53 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffbfffe) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x44ee) 22:07:53 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000000000106f", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='^', 0x0}, 0x40) [ 199.583478][ T9314] syz-executor.1 (9314) used greatest stack depth: 23016 bytes left 22:07:53 executing program 5: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080), 0x0) shmdt(0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) [ 199.705820][ T9351] BPF:hdr_len not found 22:07:53 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usag%_percpu_u|\"w\x90\xf6\x1c\x98ser\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) creat(0x0, 0xaddfcb1766a94d32) r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 22:07:55 executing program 3: 22:07:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) 22:07:55 executing program 0: 22:07:55 executing program 5: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080), 0x0) shmdt(0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1000000000000277, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 22:07:55 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) 22:07:55 executing program 4: 22:07:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:55 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7aeb0000fee2c2a522c8f42cd03c374187bb938b74abc5c9918f3d07a7364c764a3d21ce22ac360e9f13fdff90efb29a50650267e10b0f3c5db6a40adaa99c0fd8e50946b8b6d9f90269d59b9542144826acd678203a1bbbb8ec"], 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23f5f8cb193e579e386d1d89677354590dde5ffb3b62ccfa5a227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa00df46a0b10af299da7efdcc6c573074de84403de7902a07096d7eaac765c47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07000000000000000000"], &(0x7f0000000540)=0x1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000002c0)={0x1, 0x2}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x1fe, 0xf0d8, 0x80000000, 0x80000000000000}, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x3, "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", 0xb9, 0x4, 0x0, 0x2, 0x0, 0x1}}}, 0x128) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@remote, @in6=@empty}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18080080}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) r5 = fcntl$getown(r2, 0x9) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0xa000000000000005) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet(r2, &(0x7f0000000f40)="23c198cb69f8ba67f175447bb2403994d60187d1aca1a990ff01ee1c2ba16cb1534c25a5bb8bbd762bb90cd2f8ecdfc8e3fdb7b20fa715cb8897a1fc49746c3f894ec5cfeec4e73343a9befe4c2de676c79393321ebb5a71d5e5ebe6731f6e6515a65e71e24dec61332edbe9d3ab755eceb662825e99da645c65be71a1d635217659d47667d0e8c5420b96f8994a1a8ebaeeea01d3f750f3df26b4c8defcb90ea47eb4793240075e928582a6c9114bad8f44086cb51fe66e451b4f1e8dcd5c29d20682cf1bb3dbf614462b528e2518c905d9f3ac8743fc1384ab354d3cdd0bc6bdf9d3fffd79aeb5caf05c76b1861510f1976e4d16", 0xf5, 0x80, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) r7 = getpgrp(r4) setpriority(0x0, r7, 0xffff) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x9, 0x2, 0x8, 0x0, 0x84, 0x40, 0x3, 0x1ff, 0x95b2, 0x10000, 0x7ff, 0x8001, 0x401, 0x2, 0x7, 0x7, 0x1f, 0x1da, 0x974, 0xbce, 0x80, 0x8000, 0x35, 0x0, 0x71e, 0x2, 0xffff, 0x30b, 0x3, 0xfc00000000000000, 0x200, 0xc919, 0x3, 0x7fffffff, 0x1ff, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x20c, 0x0, 0x0, 0xf, 0x7f, 0xffff, 0x9}, r7, 0x2, r6, 0x2) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 22:07:55 executing program 0: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="040006bd70"], 0x3}}, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) 22:07:55 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) 22:07:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:56 executing program 1: 22:07:56 executing program 0: 22:07:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) 22:07:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:56 executing program 5: 22:07:56 executing program 1: 22:07:56 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7aeb0000fee2c2a522c8f42cd03c374187bb938b74abc5c9918f3d07a7364c764a3d21ce22ac360e9f13fdff90efb29a50650267e10b0f3c5db6a40adaa99c0fd8e50946b8b6d9f90269d59b9542144826acd678203a1bbbb8ec"], 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23f5f8cb193e579e386d1d89677354590dde5ffb3b62ccfa5a227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa00df46a0b10af299da7efdcc6c573074de84403de7902a07096d7eaac765c47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07000000000000000000"], &(0x7f0000000540)=0x1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000002c0)={0x1, 0x2}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x1fe, 0xf0d8, 0x80000000, 0x80000000000000}, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x3, "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", 0xb9, 0x4, 0x0, 0x2, 0x0, 0x1}}}, 0x128) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@remote, @in6=@empty}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18080080}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) r5 = fcntl$getown(r2, 0x9) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0xa000000000000005) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet(r2, &(0x7f0000000f40)="23c198cb69f8ba67f175447bb2403994d60187d1aca1a990ff01ee1c2ba16cb1534c25a5bb8bbd762bb90cd2f8ecdfc8e3fdb7b20fa715cb8897a1fc49746c3f894ec5cfeec4e73343a9befe4c2de676c79393321ebb5a71d5e5ebe6731f6e6515a65e71e24dec61332edbe9d3ab755eceb662825e99da645c65be71a1d635217659d47667d0e8c5420b96f8994a1a8ebaeeea01d3f750f3df26b4c8defcb90ea47eb4793240075e928582a6c9114bad8f44086cb51fe66e451b4f1e8dcd5c29d20682cf1bb3dbf614462b528e2518c905d9f3ac8743fc1384ab354d3cdd0bc6bdf9d3fffd79aeb5caf05c76b1861510f1976e4d16", 0xf5, 0x80, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) r7 = getpgrp(r4) setpriority(0x0, r7, 0xffff) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x9, 0x2, 0x8, 0x0, 0x84, 0x40, 0x3, 0x1ff, 0x95b2, 0x10000, 0x7ff, 0x8001, 0x401, 0x2, 0x7, 0x7, 0x1f, 0x1da, 0x974, 0xbce, 0x80, 0x8000, 0x35, 0x0, 0x71e, 0x2, 0xffff, 0x30b, 0x3, 0xfc00000000000000, 0x200, 0xc919, 0x3, 0x7fffffff, 0x1ff, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x20c, 0x0, 0x0, 0xf, 0x7f, 0xffff, 0x9}, r7, 0x2, r6, 0x2) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 22:07:56 executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(0xffffffffffffffff) 22:07:56 executing program 5: 22:07:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) close(r0) 22:07:56 executing program 0: 22:07:56 executing program 1: 22:07:56 executing program 5: 22:07:56 executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(0xffffffffffffffff) 22:07:56 executing program 4: 22:07:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) close(r0) 22:07:56 executing program 1: 22:07:56 executing program 0: 22:07:56 executing program 5: 22:07:56 executing program 2: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(0xffffffffffffffff) 22:07:56 executing program 1: 22:07:56 executing program 0: 22:07:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) close(r0) 22:07:56 executing program 4: 22:07:57 executing program 5: 22:07:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:57 executing program 1: 22:07:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:57 executing program 4: 22:07:57 executing program 0: 22:07:57 executing program 5: 22:07:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:57 executing program 1: 22:07:57 executing program 4: 22:07:57 executing program 0: 22:07:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:57 executing program 5: 22:07:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0xc02) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x4, "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", 0xffffffffffffff5a}, 0x1006) 22:07:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) 22:07:57 executing program 4: semop(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clock_gettime(0x0, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e, 0x0, @perf_config_ext={0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') fcntl$getownex(r5, 0x10, 0x0) 22:07:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00'}, 0x10) 22:07:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000240)=""/108}, 0x20) 22:07:57 executing program 1: msgget(0x1, 0xaa3f328d5497ff14) [ 203.647059][ T9576] devpts: called with bogus options 22:07:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:57 executing program 5: r0 = gettid() ioprio_set$pid(0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1852c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r1, &(0x7f0000000040)) inotify_init() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setuid(0x0) getuid() sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9d23c109420c966f}, 0xc, &(0x7f0000000280)}, 0x4004050) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffa7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 22:07:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r0, 0x8, 0x0, 0x8) 22:07:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x6c9, &(0x7f0000000040)=@ccm_128={{}, "8864bd2ec1413a2d", "2cdb79a11bd811e347202105c3d38a6f", "581e3f63", "90f39a71ca93c5d7"}, 0x28) [ 203.862346][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 203.862359][ T26] audit: type=1800 audit(1572214078.091:62): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16644 res=0 [ 204.020256][ T26] audit: type=1804 audit(1572214078.121:63): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir696331309/syzkaller.UzmjNT/35/file0" dev="sda1" ino=16644 res=1 [ 204.132152][ T26] audit: type=1800 audit(1572214078.121:64): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16644 res=0 22:07:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8, 0x5, 0x7fff}}}}]}, 0x40}}, 0x0) 22:07:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(r0) 22:07:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}}, 0xe) 22:07:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac71082300000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 22:07:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:58 executing program 5: r0 = gettid() ioprio_set$pid(0x0, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1852c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r1, &(0x7f0000000040)) inotify_init() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setuid(0x0) getuid() sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9d23c109420c966f}, 0xc, &(0x7f0000000280)}, 0x4004050) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffa7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 204.411571][ T9592] devpts: called with bogus options 22:07:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 22:07:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0xe5) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 22:07:58 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(0xffffffffffffffff) [ 204.513075][ T26] audit: type=1800 audit(1572214078.741:65): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16643 res=0 [ 204.550273][ T9634] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 22:07:58 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 204.619491][ T26] audit: type=1804 audit(1572214078.741:66): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir696331309/syzkaller.UzmjNT/36/file0" dev="sda1" ino=16643 res=1 22:07:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 22:07:59 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(0xffffffffffffffff) 22:07:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x20000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x4, 0x2000) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@rand_addr="43b9d8d94531c9fb0e065f4fd7a52e5a", 0x58, r2}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="0344e9ff0200600000000000fff5", 0xe, 0x0, 0x0, 0x0) [ 204.863769][ T26] audit: type=1800 audit(1572214078.741:67): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16643 res=0 22:07:59 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x882) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs(0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xffffff52) 22:07:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) close(r0) 22:07:59 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(0xffffffffffffffff) [ 205.048498][ T9663] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:07:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x10}, 0x8) close(r0) 22:07:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:59 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000000)="45522b60c0470e48f224674bab1983a6d661e3f06a4b73b59acd7b2fb526a0aa56d983733e6b9dca7ee021217ead7461ce8dcb1383a8d337cd3518661fbedb72fce309f9af2dca7a93e900000038ca109b1b345f421406a93527f1351635556215d2a33a68bde4b9f230b5e74eea44c0c757a453018dc966dbc54806d968769e86c2762d690f4f2df9483b440e340753ada9811d15d25fd2dbc31c83b48d70ffd6c2c8a550882e045f9286e76e9a647de772f3fb2555ce4ca446812103b4774b9aa5f3242dbfa541510d0e74afb0855458a88866a7bba78567097c61135bdbbfe3c18de64a9ebe60caa1308e9ee1591c428817218819a70dcb01421e4847017ac6eafb1ce3f565713a653c52ab385922d30d7cc60810b5a16eb322570d997c56ae5c1395a3d98799d9c56cbd16163ffd973d9f9586743e044660c071c8df9f9dfd849817a15eb7c3265de7cded7490c227056eda720cf10301c7222f44e953ed65db82e45d37199a54784ad7d4646669bd5a4d7f26eda32213ebc9bba0fa9927841a617944b8d77feda15ced43013bdfbe90206bbc721c3ae8f824d961748742c766544116a055489b6b7c51efb5e8e9f332fc30c2f6639dd9c3d1340bdfff57c7fdfc4e476a0027a75dd490ea0fd99f8410321120e9820589d86232ea572556deb696308c463dabe79fb9fde6a0acb99815", 0xfffffffffffffe7c, 0xe}]) 22:07:59 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 22:07:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x10}, 0x8) close(r0) 22:07:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffff6e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x15, 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000478000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 22:07:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:07:59 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x10}, 0x8) close(r0) 22:07:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x139, &(0x7f0000000040)=ANY=[@ANYBLOB="7736178dbbd289ae7b180b0000000000000000000000000000730e0000000000c732ff72c09b5992999acb708f2a7ccb42e713f1724c78c425bbec0084784cef"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xa1, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffd3d}, 0x70) [ 205.599200][ T9703] mmap: syz-executor.1 (9703) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 205.742856][ T9699] device lo entered promiscuous mode 22:08:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:08:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:08:00 executing program 5: semtimedop(0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000a80), 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0x18a, 0x0, 0x0, 0x2f95a3c3cb55ab4b) syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0xc06b367379daae16, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001480)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) write(r1, &(0x7f00000002c0)="ab24fd879f224c100dc2cedf2ccd0e534041038d36549a0646f428f53e9fa02ac4f32606e7715bfba1284bac807f4e5de4ddf1fea22806de678b", 0x3a) 22:08:00 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) pipe(0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") syz_emit_ethernet(0xae, &(0x7f0000000080)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x78, 0x3a, 0x86ddffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x10, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast1, [@dstopts={0x3, 0x4, [], [@jumbo, @ra, @jumbo, @jumbo, @enc_lim, @ra, @jumbo]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}]}}}}}}}, 0x0) 22:08:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:08:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r2) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r3 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r4) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xff, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000027c0), &(0x7f0000002800), &(0x7f0000002880)=0x0) stat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000580)={0x90, 0x0, 0x7, {0x5, 0x1, 0x12, 0x5, 0x8, 0x8fa9, {0x1, 0x24, 0x81c2, 0xd55, 0x0, 0x8, 0x7, 0x0, 0x5, 0x1, 0x6, 0x0, r7, 0x8, 0x3d}}}, 0x90) r8 = getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_buf(r12, 0x1, 0xe, &(0x7f0000000080)=""/124, &(0x7f0000000000)=0x7c) fsetxattr$system_posix_acl(r5, &(0x7f0000002780)='system.posix_acl_default\x00', &(0x7f0000003740)=ANY=[@ANYBLOB="02000000013d080000008c9b251f53c6245c493b0000000093a3d17c74b3", @ANYRES32=r6, @ANYBLOB="040004000000000800040000", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\f\x00', @ANYRES32=r8, @ANYBLOB="100003000000000000005a0007000000"], 0x44, 0x2) r13 = gettid() ptrace$setopts(0x4206, r13, 0x0, 0x0) tkill(r13, 0x29) ptrace$cont(0x18, r13, 0x0, 0x0) ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r13, 0x0, 0x0) gettid() 22:08:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:08:00 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) lstat(0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) shutdown(r3, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r1, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="06", 0x1, 0x8000000000c840, 0x0, 0x0) [ 206.301378][ T9745] sock: process `syz-executor.4' is using obsolete getsockopt SO_BSDCOMPAT 22:08:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) 22:08:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:08:00 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9f61) unlink(&(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000080)='./file1\x00', 0x0) gettid() ftruncate(r0, 0x0) 22:08:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:08:00 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) lstat(0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) shutdown(r3, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r1, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="06", 0x1, 0x8000000000c840, 0x0, 0x0) 22:08:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffff6e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x15, 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000478000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 22:08:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) 22:08:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe, 0x10}, 0x8) close(0xffffffffffffffff) 22:08:00 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) lstat(0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) shutdown(r3, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r1, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="06", 0x1, 0x8000000000c840, 0x0, 0x0) 22:08:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) [ 206.668803][ T9778] ================================================================== [ 206.677120][ T9778] BUG: KASAN: null-ptr-deref in io_wq_cancel_all+0x28/0x2a0 [ 206.684409][ T9778] Write of size 8 at addr 0000000000000004 by task syz-executor.1/9778 [ 206.692650][ T9778] [ 206.694993][ T9778] CPU: 0 PID: 9778 Comm: syz-executor.1 Not tainted 5.4.0-rc4-next-20191025 #0 [ 206.703920][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.713976][ T9778] Call Trace: [ 206.717270][ T9778] dump_stack+0x172/0x1f0 [ 206.721606][ T9778] ? io_wq_cancel_all+0x28/0x2a0 [ 206.726557][ T9778] ? io_wq_cancel_all+0x28/0x2a0 [ 206.731502][ T9778] __kasan_report.cold+0x5/0x41 [ 206.736372][ T9778] ? io_wq_cancel_all+0x28/0x2a0 [ 206.741317][ T9778] kasan_report+0x12/0x20 [ 206.745651][ T9778] check_memory_region+0x134/0x1a0 [ 206.750768][ T9778] __kasan_check_write+0x14/0x20 [ 206.755708][ T9778] io_wq_cancel_all+0x28/0x2a0 [ 206.760484][ T9778] io_ring_ctx_wait_and_kill+0x1e2/0x710 [ 206.766123][ T9778] io_uring_release+0x42/0x50 [ 206.770818][ T9778] __fput+0x2ff/0x890 [ 206.774810][ T9778] ? io_ring_ctx_wait_and_kill+0x710/0x710 [ 206.780621][ T9778] ____fput+0x16/0x20 [ 206.784605][ T9778] task_work_run+0x145/0x1c0 [ 206.789204][ T9778] do_exit+0x904/0x2e60 [ 206.793371][ T9778] ? mm_update_next_owner+0x640/0x640 [ 206.798735][ T9778] ? lock_downgrade+0x920/0x920 [ 206.803569][ T9778] ? _raw_spin_unlock_irq+0x23/0x80 [ 206.808746][ T9778] ? get_signal+0x392/0x24f0 [ 206.813318][ T9778] ? _raw_spin_unlock_irq+0x23/0x80 [ 206.818499][ T9778] do_group_exit+0x135/0x360 [ 206.823077][ T9778] get_signal+0x47c/0x24f0 [ 206.827479][ T9778] ? lock_downgrade+0x920/0x920 [ 206.832323][ T9778] do_signal+0x87/0x1700 [ 206.836550][ T9778] ? __kasan_check_read+0x11/0x20 [ 206.841558][ T9778] ? _copy_to_user+0x118/0x160 [ 206.846305][ T9778] ? setup_sigcontext+0x7d0/0x7d0 [ 206.851319][ T9778] ? exit_to_usermode_loop+0x43/0x380 [ 206.856669][ T9778] ? do_syscall_64+0x65f/0x760 [ 206.861415][ T9778] ? exit_to_usermode_loop+0x43/0x380 [ 206.866770][ T9778] ? lockdep_hardirqs_on+0x421/0x5e0 [ 206.872039][ T9778] ? trace_hardirqs_on+0x67/0x240 [ 206.877047][ T9778] exit_to_usermode_loop+0x286/0x380 [ 206.882314][ T9778] do_syscall_64+0x65f/0x760 [ 206.886905][ T9778] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 206.892777][ T9778] RIP: 0033:0x459f39 [ 206.896655][ T9778] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.916257][ T9778] RSP: 002b:00007f33a8f1ccf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.924649][ T9778] RAX: 0000000000000001 RBX: 000000000075bfd0 RCX: 0000000000459f39 [ 206.932615][ T9778] RDX: 00000000004cdd80 RSI: 0000000000000081 RDI: 000000000075bfd4 [ 206.940571][ T9778] RBP: 000000000075bfc8 R08: 0000000000000009 R09: 0000000000000000 [ 206.948548][ T9778] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000075bfd4 [ 206.956500][ T9778] R13: 00007fff71baeb9f R14: 00007f33a8f1d9c0 R15: 000000000075bfd4 22:08:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffffffffffe}, 0x8) close(r0) [ 206.964465][ T9778] ================================================================== [ 206.972500][ T9778] Disabling lock debugging due to kernel taint 22:08:01 executing program 4: r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8202e1ffffffffffffff"], 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 207.077789][ T9778] Kernel panic - not syncing: panic_on_warn set ... [ 207.084427][ T9778] CPU: 1 PID: 9778 Comm: syz-executor.1 Tainted: G B 5.4.0-rc4-next-20191025 #0 [ 207.094745][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.104806][ T9778] Call Trace: [ 207.108105][ T9778] dump_stack+0x172/0x1f0 [ 207.112439][ T9778] panic+0x2e3/0x75c [ 207.116336][ T9778] ? add_taint.cold+0x16/0x16 [ 207.121017][ T9778] ? io_wq_cancel_all+0x28/0x2a0 [ 207.125958][ T9778] ? preempt_schedule+0x4b/0x60 [ 207.130811][ T9778] ? ___preempt_schedule+0x16/0x18 [ 207.135931][ T9778] ? trace_hardirqs_on+0x5e/0x240 [ 207.140981][ T9778] ? io_wq_cancel_all+0x28/0x2a0 [ 207.145926][ T9778] end_report+0x47/0x4f [ 207.150079][ T9778] ? io_wq_cancel_all+0x28/0x2a0 [ 207.155018][ T9778] __kasan_report.cold+0xe/0x41 [ 207.159867][ T9778] ? io_wq_cancel_all+0x28/0x2a0 [ 207.164807][ T9778] kasan_report+0x12/0x20 [ 207.169135][ T9778] check_memory_region+0x134/0x1a0 [ 207.174245][ T9778] __kasan_check_write+0x14/0x20 [ 207.179179][ T9778] io_wq_cancel_all+0x28/0x2a0 [ 207.184118][ T9778] io_ring_ctx_wait_and_kill+0x1e2/0x710 [ 207.189750][ T9778] io_uring_release+0x42/0x50 [ 207.194429][ T9778] __fput+0x2ff/0x890 [ 207.198425][ T9778] ? io_ring_ctx_wait_and_kill+0x710/0x710 [ 207.204229][ T9778] ____fput+0x16/0x20 [ 207.208210][ T9778] task_work_run+0x145/0x1c0 [ 207.212803][ T9778] do_exit+0x904/0x2e60 [ 207.217394][ T9778] ? mm_update_next_owner+0x640/0x640 [ 207.222766][ T9778] ? lock_downgrade+0x920/0x920 [ 207.227610][ T9778] ? _raw_spin_unlock_irq+0x23/0x80 [ 207.232802][ T9778] ? get_signal+0x392/0x24f0 [ 207.237395][ T9778] ? _raw_spin_unlock_irq+0x23/0x80 [ 207.242592][ T9778] do_group_exit+0x135/0x360 [ 207.247185][ T9778] get_signal+0x47c/0x24f0 [ 207.251608][ T9778] ? lock_downgrade+0x920/0x920 [ 207.256464][ T9778] do_signal+0x87/0x1700 [ 207.260749][ T9778] ? __kasan_check_read+0x11/0x20 [ 207.262744][ T3920] kobject: 'loop3' (00000000d34821a7): kobject_uevent_env [ 207.265770][ T9778] ? _copy_to_user+0x118/0x160 [ 207.272948][ T3920] kobject: 'loop3' (00000000d34821a7): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 207.277600][ T9778] ? setup_sigcontext+0x7d0/0x7d0 [ 207.277620][ T9778] ? exit_to_usermode_loop+0x43/0x380 [ 207.298126][ T9778] ? do_syscall_64+0x65f/0x760 [ 207.302896][ T9778] ? exit_to_usermode_loop+0x43/0x380 [ 207.308272][ T9778] ? lockdep_hardirqs_on+0x421/0x5e0 [ 207.313549][ T9778] ? trace_hardirqs_on+0x67/0x240 [ 207.318598][ T9778] exit_to_usermode_loop+0x286/0x380 [ 207.323862][ T9778] do_syscall_64+0x65f/0x760 [ 207.328434][ T9778] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.334309][ T9778] RIP: 0033:0x459f39 [ 207.338197][ T9778] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.357867][ T9778] RSP: 002b:00007f33a8f1ccf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 207.366261][ T9778] RAX: 0000000000000001 RBX: 000000000075bfd0 RCX: 0000000000459f39 [ 207.374309][ T9778] RDX: 00000000004cdd80 RSI: 0000000000000081 RDI: 000000000075bfd4 [ 207.382269][ T9778] RBP: 000000000075bfc8 R08: 0000000000000009 R09: 0000000000000000 [ 207.390231][ T9778] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000075bfd4 [ 207.398179][ T9778] R13: 00007fff71baeb9f R14: 00007f33a8f1d9c0 R15: 000000000075bfd4 [ 207.407436][ T9778] Kernel Offset: disabled [ 207.411772][ T9778] Rebooting in 86400 seconds..