[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.141' (ECDSA) to the list of known hosts. 2020/10/07 09:57:38 fuzzer started 2020/10/07 09:57:38 dialing manager at 10.128.0.105:34695 2020/10/07 09:57:39 syscalls: 3308 2020/10/07 09:57:39 code coverage: enabled 2020/10/07 09:57:39 comparison tracing: enabled 2020/10/07 09:57:39 extra coverage: extra coverage is not supported by the kernel 2020/10/07 09:57:39 setuid sandbox: enabled 2020/10/07 09:57:39 namespace sandbox: enabled 2020/10/07 09:57:39 Android sandbox: enabled 2020/10/07 09:57:39 fault injection: enabled 2020/10/07 09:57:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/07 09:57:39 net packet injection: enabled 2020/10/07 09:57:39 net device setup: enabled 2020/10/07 09:57:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/07 09:57:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/07 09:57:39 USB emulation: /dev/raw-gadget does not exist 2020/10/07 09:57:39 hci packet injection: enabled 2020/10/07 09:57:39 wifi device emulation: enabled 09:59:21 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@buf={0x50, &(0x7f0000000380)="a21f4f5a13c8221b71dc7ecab1baea4387c93ef587e1a383cd2c3f27bdbd2896e98273b6c26c9753a7c7f4b9d21a5a65b7f65dd82a1d99a80ecbe29f97c33f25cd18a1570574c1ebfbc79c852feb03ef"}) syzkaller login: [ 142.913860] audit: type=1400 audit(1602064761.102:8): avc: denied { execmem } for pid=6515 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:59:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240080cd) 09:59:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(&(0x7f0000000880)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x25, 0x32]}}]}) 09:59:21 executing program 3: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r1) 09:59:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000), 0x4) 09:59:21 executing program 5: r0 = shmget(0x1, 0x4000, 0x1200, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) [ 144.110869] IPVS: ftp: loaded support on port[0] = 21 [ 144.289943] IPVS: ftp: loaded support on port[0] = 21 [ 144.290247] chnl_net:caif_netlink_parms(): no params data found [ 144.448562] IPVS: ftp: loaded support on port[0] = 21 [ 144.490691] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.498113] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.506653] device bridge_slave_0 entered promiscuous mode [ 144.577065] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.592852] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.603671] device bridge_slave_1 entered promiscuous mode [ 144.656263] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.675240] IPVS: ftp: loaded support on port[0] = 21 [ 144.682535] chnl_net:caif_netlink_parms(): no params data found [ 144.693477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.802292] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.815984] team0: Port device team_slave_0 added [ 144.875170] IPVS: ftp: loaded support on port[0] = 21 [ 144.970827] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.980438] team0: Port device team_slave_1 added [ 145.016569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.022848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.050284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.080011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.086528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.113936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.124990] chnl_net:caif_netlink_parms(): no params data found [ 145.130506] IPVS: ftp: loaded support on port[0] = 21 [ 145.146059] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.181728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.265625] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.272023] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.280603] device bridge_slave_0 entered promiscuous mode [ 145.307860] device hsr_slave_0 entered promiscuous mode [ 145.314656] device hsr_slave_1 entered promiscuous mode [ 145.344959] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.351367] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.360463] device bridge_slave_1 entered promiscuous mode [ 145.379156] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.423699] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 145.436423] chnl_net:caif_netlink_parms(): no params data found [ 145.451919] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.512335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.526441] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.532833] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.542240] device bridge_slave_0 entered promiscuous mode [ 145.606609] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.615200] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.624853] device bridge_slave_1 entered promiscuous mode [ 145.678461] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.687098] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.695704] team0: Port device team_slave_0 added [ 145.700819] chnl_net:caif_netlink_parms(): no params data found [ 145.722837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.732565] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.740766] team0: Port device team_slave_1 added [ 145.816391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.824908] team0: Port device team_slave_0 added [ 145.860643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.867382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.896000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.910837] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.919091] team0: Port device team_slave_1 added [ 145.925403] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.931775] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.939071] device bridge_slave_0 entered promiscuous mode [ 145.950188] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.957554] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.966177] device bridge_slave_1 entered promiscuous mode [ 145.976816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.984228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.010796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.068675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.079106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.095288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.101547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.127897] Bluetooth: hci0: command 0x0409 tx timeout [ 146.130435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.147388] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.218188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.224643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.251608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.264592] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.275366] device hsr_slave_0 entered promiscuous mode [ 146.281065] device hsr_slave_1 entered promiscuous mode [ 146.293068] Bluetooth: hci1: command 0x0409 tx timeout [ 146.302705] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.310732] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.340246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.348029] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.366608] chnl_net:caif_netlink_parms(): no params data found [ 146.379396] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.386891] team0: Port device team_slave_0 added [ 146.431926] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.440338] team0: Port device team_slave_1 added [ 146.445564] Bluetooth: hci2: command 0x0409 tx timeout [ 146.466443] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.474533] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.481674] device bridge_slave_0 entered promiscuous mode [ 146.494706] device hsr_slave_0 entered promiscuous mode [ 146.500506] device hsr_slave_1 entered promiscuous mode [ 146.529964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.536551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.563214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.573809] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.580209] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.589538] device bridge_slave_1 entered promiscuous mode [ 146.596574] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.603601] Bluetooth: hci3: command 0x0409 tx timeout [ 146.628888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.635443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.662333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.683160] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.711563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.737105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.746158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.756824] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.816074] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.838260] device hsr_slave_0 entered promiscuous mode [ 146.843821] Bluetooth: hci4: command 0x0409 tx timeout [ 146.849594] device hsr_slave_1 entered promiscuous mode [ 146.876862] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 146.923276] Bluetooth: hci5: command 0x0409 tx timeout [ 146.929707] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 146.966331] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.976696] team0: Port device team_slave_0 added [ 146.996522] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.004332] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.011548] device bridge_slave_0 entered promiscuous mode [ 147.029245] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 147.037239] team0: Port device team_slave_1 added [ 147.068120] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.075587] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.082708] device bridge_slave_1 entered promiscuous mode [ 147.105905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.112180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.137773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.154054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.160324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.185995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.229308] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.236242] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.253512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.290986] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.310663] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.337520] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.354922] device hsr_slave_0 entered promiscuous mode [ 147.360676] device hsr_slave_1 entered promiscuous mode [ 147.368375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 147.398155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.406523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 147.427283] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 147.436356] team0: Port device team_slave_0 added [ 147.446771] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.461120] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 147.475465] team0: Port device team_slave_1 added [ 147.542406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.549345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.574802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.598578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.609657] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 147.616157] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.623697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.629941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.655558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.670414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.690270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.698685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.716243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.725035] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.740472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.747121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.756669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.765141] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.771588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.779558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.817508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.829395] device hsr_slave_0 entered promiscuous mode [ 147.836645] device hsr_slave_1 entered promiscuous mode [ 147.847120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.868537] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 147.876498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.886854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.895247] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.901607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.911953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.937436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.945187] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 147.955843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.963876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.970954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.981823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.008585] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.015362] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.032091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.038868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.057204] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.070315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.079264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.091071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.099423] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.109345] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.128705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.136941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.146410] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.152764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.160670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.169972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.180146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.189477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.197907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.205875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.215833] Bluetooth: hci0: command 0x041b tx timeout [ 148.216945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 148.232515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.258554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.266627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.275518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.284100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.291764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.301691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.310115] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.316570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.329693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 148.340810] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 148.347675] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.361836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.373334] Bluetooth: hci1: command 0x041b tx timeout [ 148.375499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.387124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.396112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.405389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.414026] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.420416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.428971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.438679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.448136] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.470484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.500279] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.508408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.519360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.528073] Bluetooth: hci2: command 0x041b tx timeout [ 148.531085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.552530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.567287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.577177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.585290] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.591645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.617302] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 148.633968] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 148.641617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.661527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.668658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.676635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.686184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.693212] Bluetooth: hci3: command 0x041b tx timeout [ 148.696080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.707003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.725649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.738509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.747406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.756013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.770879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.788340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 148.805152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.812121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.824698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.834262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.845889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.865641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.880602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 148.895667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.907388] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.916932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.926375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.933383] Bluetooth: hci4: command 0x041b tx timeout [ 148.942582] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 148.954963] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 148.961021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.970258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 148.980732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 148.992690] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.001151] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.009753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.013547] Bluetooth: hci5: command 0x041b tx timeout [ 149.029437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.040539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.048749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.057047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.064489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.071500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.079849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.088403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.097341] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.108183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.123920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.131085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.138888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.148611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.158607] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 149.169505] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 149.176582] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.185870] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 149.191962] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.204066] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.215292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 149.225925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.238649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.249951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.259038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.267772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.276164] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.282515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.290041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.306673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.316431] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.327095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.334698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.346809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.354547] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.360904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.369153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.376008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.382704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.390757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.398519] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.404944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.417101] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 149.425528] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 149.432086] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 149.446261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.454462] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 149.460487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.470667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.479608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.490883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.499079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.507523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.515555] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.521895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.538425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.560647] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 149.569477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.580900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.589487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.597719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.605638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.613820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.622838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.630187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.645942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.659899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.668990] device veth0_vlan entered promiscuous mode [ 149.679229] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 149.691752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.700229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.708719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.716973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.724994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.732685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.743182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.757857] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 149.770286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.785344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.792266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.807691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.816011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.824168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.835409] device veth1_vlan entered promiscuous mode [ 149.841648] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 149.854327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 149.863821] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 149.874023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 149.880910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.891040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.899858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.907933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.918578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.961718] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 149.971706] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 149.994545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 150.020663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 150.030644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.041716] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 150.049132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.056721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.067046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.074388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.081166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.089296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.097227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.105255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.119876] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 150.135041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.155111] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.162268] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.170218] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.181577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 150.190003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.198634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.211896] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 150.222000] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 150.233370] device veth0_macvtap entered promiscuous mode [ 150.240127] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 150.252076] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 150.263590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.271257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.280123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.289490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.301815] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 150.308818] Bluetooth: hci0: command 0x040f tx timeout [ 150.310827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.324112] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.331526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.341223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.350662] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 150.359614] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 150.369683] device veth1_macvtap entered promiscuous mode [ 150.378732] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 150.392745] device veth0_vlan entered promiscuous mode [ 150.408647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.417178] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.428511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.437771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.446252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.452942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.453423] Bluetooth: hci1: command 0x040f tx timeout [ 150.463382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.477175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.488071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.500155] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 150.518902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.537183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 150.546827] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 150.555817] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.569099] device veth1_vlan entered promiscuous mode [ 150.578060] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 150.591233] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 150.599831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.609662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.618423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.626045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.634506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.641662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.649718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.658713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.667853] Bluetooth: hci2: command 0x040f tx timeout [ 150.670969] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 150.685702] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 150.699675] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 150.708433] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 150.716271] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 150.734150] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 150.741524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.756003] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 150.762430] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.769394] Bluetooth: hci3: command 0x040f tx timeout [ 150.777233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.786177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.794979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.804506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.812707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.828087] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 150.846951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.865413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.879305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.887799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.897092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.905612] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.912358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.920146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.928804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.936784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.967610] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 150.980809] device veth0_vlan entered promiscuous mode [ 150.990415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 151.005012] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.049315] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 151.055981] Bluetooth: hci4: command 0x040f tx timeout [ 151.061363] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 151.071943] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 151.080255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.089297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.098830] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.105636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.113060] Bluetooth: hci5: command 0x040f tx timeout [ 151.115307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.136434] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 151.148311] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 151.162359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.171123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.189783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.198189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.206926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.217418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.228367] device veth1_vlan entered promiscuous mode [ 151.235650] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 151.245241] device veth0_vlan entered promiscuous mode [ 151.251811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.260677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.269453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.278191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.289401] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.301371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.313762] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 151.328909] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.337202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.350645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.359994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.369775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.378519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.389020] device veth0_macvtap entered promiscuous mode [ 151.396707] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.408347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.422304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 151.435588] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 151.444335] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 151.452875] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 151.465829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.474716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.482818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.493301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.501053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.512160] device veth1_macvtap entered promiscuous mode [ 151.520314] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 151.531065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 151.542049] device veth1_vlan entered promiscuous mode [ 151.550248] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 151.559866] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.568764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.576938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.585013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.594689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.607541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 151.622099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 151.632239] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 151.640400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.657539] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 151.670021] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 151.684185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.692141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.702544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.713282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.721471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.729798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.739059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 151.750607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.761959] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 151.769917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.779783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 151.789737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.801221] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.810217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.821879] device veth0_macvtap entered promiscuous mode [ 151.831966] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 151.840191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.848365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.857031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.866117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.875013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.891183] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 151.905654] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 151.928841] device veth0_vlan entered promiscuous mode [ 151.938117] device veth1_macvtap entered promiscuous mode [ 151.951479] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 151.968199] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 151.984169] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 152.049346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.074247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.081434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.088674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.097251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.109450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 152.121181] device veth1_vlan entered promiscuous mode [ 152.129101] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 152.138373] device veth0_macvtap entered promiscuous mode [ 152.146818] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 152.166017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 152.191849] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 152.200461] device veth1_macvtap entered promiscuous mode [ 152.212446] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 152.222161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.233386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.242723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.254438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.266384] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 152.274535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.284173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.301840] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 152.319695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 152.321582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.342027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.359499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.372796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.373673] Bluetooth: hci0: command 0x0419 tx timeout [ 152.382334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.394503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.402688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.412038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.421315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.434467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.445276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.454900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.466310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.477549] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.485859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.504341] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 152.525526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 152.533354] Bluetooth: hci1: command 0x0419 tx timeout [ 152.542053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.551409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.572002] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 152.585490] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 152.594117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.604653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.604664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.620112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.630521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.641456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.652329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 152.663745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.677825] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 152.686847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.693917] Bluetooth: hci2: command 0x0419 tx timeout [ 152.703532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.711652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.720513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.728874] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.737775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.759401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.772743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.791283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.813048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.826831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 152.845543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.850815] Bluetooth: hci3: command 0x0419 tx timeout [ 152.862642] audit: type=1400 audit(1602064771.042:9): avc: denied { create } for pid=7836 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 152.864980] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 152.891430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.902372] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 152.908567] audit: type=1400 audit(1602064771.042:10): avc: denied { ioctl } for pid=7836 comm="syz-executor.0" path="socket:[29281]" dev="sockfs" ino=29281 ioctlcmd=0x8912 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 152.929384] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 152.956801] device veth0_macvtap entered promiscuous mode [ 152.978503] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready 09:59:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x9, 0x0, 0x98) [ 153.000451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.012718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.031083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.040040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.056578] device veth1_macvtap entered promiscuous mode [ 153.076058] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 153.084253] Bluetooth: hci4: command 0x0419 tx timeout 09:59:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) [ 153.103920] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.112005] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.143582] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 153.151839] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 153.169569] Bluetooth: hci5: command 0x0419 tx timeout [ 153.172003] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 153.190679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 153.224913] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 153.239589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 153.262065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 09:59:31 executing program 0: setreuid(0xee01, 0xee01) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) [ 153.272204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.284819] device veth0_vlan entered promiscuous mode [ 153.305136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.316089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.340933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.360644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.372892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 09:59:31 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)={0x8}, &(0x7f0000000480), 0x1000) [ 153.384069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.394589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.406244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.424783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.439942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.454204] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 153.462141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.476770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 09:59:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001340)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000001380)={0x3f, 0x0, 0x0, 'queue1\x00'}) [ 153.488101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.508596] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 153.521077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 09:59:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') listen(r1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 153.544695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.559294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.597893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.623045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.645348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.657188] hrtimer: interrupt took 30598 ns [ 153.657254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.673721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.685602] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 153.698836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.717197] device veth1_vlan entered promiscuous mode [ 153.725447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.732812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.751538] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 153.771090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.780287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.795710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.807433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.882536] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 153.902822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.913379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.925893] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 153.936534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.980177] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 154.021199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.037742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.057096] device veth0_macvtap entered promiscuous mode 09:59:32 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) clone(0x80000108100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140), 0x2) [ 154.079476] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 154.121740] device veth1_macvtap entered promiscuous mode [ 154.139412] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 154.152851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 154.157451] misc userio: No port type given on /dev/userio 09:59:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x400121e1) [ 154.181000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 154.193815] misc userio: No port type given on /dev/userio [ 154.248134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.260760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.288831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.316539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.330524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.348669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.359694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.372747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.384439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.395028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.406896] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 154.414628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.426549] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 154.439540] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.476426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.492405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.501924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.514844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.529202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.539283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.550075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.560109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.570498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.581203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.592124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.604819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.615089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.626893] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 154.634505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.662056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.666303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.677954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.690404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.708577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.787189] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 154.800654] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 154.814449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.822146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.841724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.867608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.876509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.885658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.901710] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 154.952086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.970844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.975208] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 154.990641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.023947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.058920] tmpfs: Bad value '%2' for mount option 'size' [ 155.070325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.087855] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 155.106208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.114654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 09:59:33 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x0, 0x93}, 0x10) [ 155.133233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.176925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.376984] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 155.388274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.427215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.440101] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 155.456783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.470674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.489046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.501308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:59:34 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 09:59:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {0x0, 0x0, 0x80000001}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 09:59:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x3ff, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 09:59:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) 09:59:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000040)="3419642704861c41a3de9234a1996d7a225268cadc0654b31ac668f3da2a9b794de64582b26d44f5110c25de5a3cb274a659c9ce74e4c883d6a1da9424bc567cc26d9809204d76951d953ab881c136f915a8f95fd89a36623e7bba302db5693c853e3d318571d7e99a982ba44450e2727e54946551776ecb2cadd27f8d16e47aa0aa957282d912ac2ef8e674dff5f91c", 0x90) 09:59:34 executing program 5: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet(0x10, 0x3, 0x0) socket(0x0, 0x1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) sendto(0xffffffffffffffff, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, 0x0}, 0x0) 09:59:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1fb}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x80000000) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="f30f09dd467366b9800000c00f326635000100000f30f0812700000f013d0f20a6660f154c00f4baf80c66b8345a5a8866efbafc0c66edbaf80c66b8d2174f8066efbafc0cb87000ef", 0x49}], 0x1, 0x64, 0x0, 0x0) ioprio_get$uid(0x0, r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x0, 0x0) accept$alg(r5, 0x0, 0x0) readv(r5, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 09:59:34 executing program 4: r0 = socket(0x23, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) [ 155.953290] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 09:59:34 executing program 2: syz_emit_ethernet(0x40, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0509f4", 0xa, 0x0, 0x0, @private0, @private0, {[@routing={0x0, 0x0, 0x0, 0xb2}], 'B]'}}}}}, 0x0) [ 156.045004] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended 09:59:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt(r1, 0x8, 0xd8, &(0x7f0000000540)=""/239, &(0x7f00000003c0)=0xef) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000480)={r9, r2, 0x0, 0x61, &(0x7f0000000080)="8c062c8296dd4442a324d10314403f4871df6cb1210d960533fcfd81f52bb291ca5ba9726f4d7c9e3575e331276c25c66d16472526db4d15a722237d93da4b01b3f069fdff4a4aee7fa98ea7cf8cc8b52cccbde24d208664c16d3d6fc8106c0a55", 0x7f, 0x80, 0x7725, 0x5, 0x8, 0x1, 0x7, 'syz0\x00'}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x60, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1f}, @IFLA_GRE_TTL={0x5, 0x8, 0x16}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3b}, @IFLA_GRE_FLOWINFO={0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xa112}, @IFLA_GRE_IFLAGS={0xfffffffffffffcfd, 0x2, 0xfeff}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfff}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0xa0}}, 0x4000010) 09:59:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private0}}) [ 156.226047] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 09:59:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000074d80)={0x0, 0x0, "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", "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"}) [ 156.312788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:59:34 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b073b00373000000000000072"], 0x12) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 09:59:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc08c5102, &(0x7f00000000c0)) [ 156.389088] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 156.410258] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.545726] kvm: pic: non byte read [ 156.551832] kvm: pic: non byte write [ 156.558331] kvm: pic: non byte write [ 156.567422] audit: type=1800 audit(1602064774.752:11): pid=8074 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15759 res=0 [ 156.605931] kvm: pic: non byte read 09:59:34 executing program 5: socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet(0x10, 0x3, 0x0) socket(0x0, 0x1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) sendto(0xffffffffffffffff, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, 0x0}, 0x0) 09:59:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000074d80)={0x0, 0x0, "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", "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"}) [ 156.607809] kvm: pic: non byte write 09:59:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000074d80)={0x0, 0x0, "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", "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"}) [ 156.608179] kvm: pic: non byte write 09:59:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="a0923e922f6d", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 156.609062] kvm: pic: non byte read [ 156.610367] kvm: pic: non byte write [ 156.610695] kvm: pic: non byte write [ 156.611679] kvm: pic: level sensitive irq not supported [ 156.611821] kvm: pic: non byte read [ 156.737756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.739158] syz-executor.5 (8074) used greatest stack depth: 23392 bytes left [ 156.857171] kvm: pic: non byte read [ 156.858467] kvm: pic: non byte write [ 156.859172] kvm: pic: non byte write [ 156.859603] kvm: pic: non byte read [ 156.860446] kvm: pic: non byte write [ 156.862235] kvm: pic: non byte write [ 156.862775] kvm: pic: non byte read [ 156.892835] kvm: pic: level sensitive irq not supported [ 156.893501] kvm: pic: non byte read [ 156.915893] kvm: pic: non byte read [ 156.922638] kvm: pic: non byte read 09:59:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f00)=""/1680, 0xfd1a) 09:59:35 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000140)) 09:59:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x24000844) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1, r2}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:59:35 executing program 0: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 09:59:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) 09:59:35 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000000)) 09:59:35 executing program 2: bpf$BPF_PROG_QUERY(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) clock_gettime(0x0, &(0x7f0000000140)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x0, 0x0, 0x0, 0x2, 0x8}, 0xffffffffffffffff, 0xd, r0, 0x5) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x541b, 0x0) 09:59:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67]}}, {@mpol={'mpol', 0x3d, {'default', '=relative'}}}]}) 09:59:35 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065fffff81c00000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:59:35 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x1) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:59:35 executing program 3: syz_mount_image$ocfs2(&(0x7f00000005c0)='ocfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) [ 156.938704] kvm: pic: level sensitive irq not supported [ 157.828889] tmpfs: Bad value 'default=relative:' for mount option 'mpol' [ 157.864788] tmpfs: Bad value 'default=relative:' for mount option 'mpol' [ 157.876050] IPVS: ftp: loaded support on port[0] = 21 09:59:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, 0xc, 0x6, 0x401, 0x0, 0x0, {}, [@nested={0x4, 0x54}]}, 0x18}}, 0x0) 09:59:36 executing program 2: bpf$BPF_PROG_QUERY(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) clock_gettime(0x0, &(0x7f0000000140)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x0, 0x0, 0x0, 0x2, 0x8}, 0xffffffffffffffff, 0xd, r0, 0x5) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x541b, 0x0) 09:59:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e791a2daa2586f6fded0000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea000000002655356f5400fbfa0000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0xffffff4b, 0x4) 09:59:36 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10143d9bbe86dd", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 09:59:36 executing program 0: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 09:59:36 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f00000000c0)=0x4, 0x63, 0x0) 09:59:36 executing program 2: bpf$BPF_PROG_QUERY(0x3, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) clock_gettime(0x0, &(0x7f0000000140)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x0, 0x0, 0x0, 0x2, 0x8}, 0xffffffffffffffff, 0xd, r0, 0x5) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x541b, 0x0) 09:59:36 executing program 4: r0 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x1045) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 09:59:36 executing program 1: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x1) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 09:59:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005074e00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000002800310f000000000000000006000000", @ANYRES32=r5, @ANYBLOB="040000000000ffff000000000b0001006367726f757000003800020034000100300000000a00010070656469740000000400028004"], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x2a, 0xf35, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) [ 158.734300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 09:59:37 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp1\x00', 0x26a82, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x800, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) 09:59:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000024000b0f000000000000000000020000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100647272"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180), 0x492492492492642, 0x0) [ 158.811649] HTB: quantum of class FFFF0004 is big. Consider r2q change. 09:59:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON}) [ 158.924756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 09:59:37 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x19a, 0x0, 0x0) [ 158.971227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 09:59:37 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x7fffef80, 0x0) [ 159.017666] IPVS: ftp: loaded support on port[0] = 21 09:59:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 159.392638] audit: type=1804 audit(1602064777.572:12): pid=8291 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir568151897/syzkaller.ZzWIED/12/bus" dev="sda1" ino=15775 res=1 09:59:38 executing program 0: syz_emit_ethernet(0xea, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x26, 0x4, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @private, {[@rr={0x7, 0x17, 0x0, [@multicast2, @multicast1, @rand_addr, @remote, @rand_addr]}, @end, @end, @cipso={0x86, 0x68, 0x0, [{0x0, 0xd, "132f52f610c3289f1ad14a"}, {0x0, 0xf, "a31135f1a12ecd2f031f84e1fc"}, {0x0, 0xd, "73e2741404db015cc530b7"}, {0x0, 0x2}, {0x0, 0x5, "1308fb"}, {0x0, 0x10, "10d9d907d60255ed0c36c27afdf5"}, {0x0, 0xc, "500d7cf6faf5ae65f78f"}, {0x0, 0xc, "6df206def2f3a0d39b4a"}, {0x0, 0xa, "937f8167723b68ed"}]}]}}}}}}, 0x0) 09:59:38 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000180), 0x4) 09:59:38 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp1\x00', 0x26a82, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x800, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) 09:59:38 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x7fffef80, 0x0) 09:59:38 executing program 5: syz_emit_ethernet(0xc2, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@dev}, {@empty}, {@private}, {@dev}, {@empty}, {@broadcast}, {@empty}, {@multicast1}]}, @ssrr={0x89, 0x7, 0x0, [@loopback]}, @lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @generic={0x0, 0x8, "cd6c69a54290"}]}}}}}}}, 0x0) 09:59:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 09:59:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1}) 09:59:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000001100)={0x0, 0x1, [{0xf}]}) 09:59:38 executing program 5: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401", @ANYRES64], 0x38}, 0x8000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000, 0x2a77, 0xfc90009}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000001280)}, 0x0) 09:59:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x323a, 0x4, 0x0, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 160.180547] ================================================================================ [ 160.189333] UBSAN: Undefined behaviour in net/netfilter/ipset/ip_set_hash_gen.h:125:6 [ 160.197340] shift exponent 32 is too large for 32-bit type 'unsigned int' [ 160.204310] CPU: 0 PID: 8338 Comm: syz-executor.3 Not tainted 4.19.150-syzkaller #0 [ 160.214716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.224188] Call Trace: [ 160.226794] dump_stack+0x22c/0x33e [ 160.230463] ubsan_epilogue+0xe/0x3a [ 160.234196] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 160.240368] ? hash_ipport_create+0x366/0xa4d [ 160.244913] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 160.249953] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 160.254814] hash_ipport_create.cold+0x1a/0x2d [ 160.259434] ? hash_ipport4_add+0x1ee0/0x1ee0 [ 160.263941] ip_set_create+0x70e/0x1380 [ 160.267931] ? __find_set_type_get+0x450/0x450 [ 160.272545] ? lock_downgrade+0x750/0x750 [ 160.276709] ? __find_set_type_get+0x450/0x450 09:59:38 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x3) [ 160.278224] x_tables: duplicate underflow at hook 3 [ 160.281302] nfnetlink_rcv_msg+0xeff/0x1210 [ 160.281343] ? nfnetlink_net_init+0x170/0x170 [ 160.281370] ? avc_has_extended_perms+0x1020/0x1020 [ 160.281382] ? avc_has_extended_perms+0x1020/0x1020 [ 160.281401] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 160.309832] ? lock_downgrade+0x750/0x750 [ 160.313998] ? __local_bh_enable_ip+0x159/0x2a0 [ 160.318689] ? cred_has_capability+0x162/0x2e0 [ 160.323283] ? cred_has_capability+0x1d9/0x2e0 [ 160.327912] ? selinux_inode_copy_up+0x180/0x180 [ 160.332712] ? selinux_inode_copy_up+0x180/0x180 [ 160.337513] netlink_rcv_skb+0x160/0x440 [ 160.342458] ? nfnetlink_net_init+0x170/0x170 [ 160.346972] ? netlink_ack+0xae0/0xae0 [ 160.350876] ? ns_capable_common+0x117/0x140 [ 160.355299] nfnetlink_rcv+0x1b2/0x41b [ 160.359193] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 160.363991] netlink_unicast+0x4d5/0x690 [ 160.368064] ? netlink_sendskb+0x110/0x110 [ 160.372316] netlink_sendmsg+0x717/0xcc0 [ 160.376394] ? nlmsg_notify+0x1a0/0x1a0 [ 160.380383] ? __sock_recv_ts_and_drops+0x540/0x540 [ 160.385432] ? nlmsg_notify+0x1a0/0x1a0 [ 160.389419] sock_sendmsg+0xc7/0x130 [ 160.393142] ___sys_sendmsg+0x7bb/0x8f0 [ 160.397130] ? copy_msghdr_from_user+0x440/0x440 [ 160.401906] ? find_held_lock+0x2d/0x110 [ 160.405989] ? __fget+0x386/0x570 [ 160.409476] ? lock_downgrade+0x750/0x750 [ 160.413630] ? check_preemption_disabled+0x41/0x2b0 [ 160.418658] ? __fget+0x3ad/0x570 [ 160.422123] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 160.426361] ? lock_acquire+0x170/0x3f0 [ 160.430341] ? __might_fault+0xef/0x1d0 [ 160.434328] ? __fget_light+0x1d1/0x230 [ 160.438341] __x64_sys_sendmsg+0x132/0x220 [ 160.442585] ? __sys_sendmsg+0x1b0/0x1b0 [ 160.446669] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 160.452041] ? trace_hardirqs_off_caller+0x6e/0x210 [ 160.457766] ? do_syscall_64+0x21/0x670 [ 160.461748] do_syscall_64+0xf9/0x670 [ 160.465556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.470746] RIP: 0033:0x45de29 [ 160.473938] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 160.492845] RSP: 002b:00007efc901adc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.500645] RAX: ffffffffffffffda RBX: 0000000000029b40 RCX: 000000000045de29 [ 160.508009] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 160.515285] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 160.522560] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 160.529840] R13: 00007fffa3def77f R14: 00007efc901ae9c0 R15: 000000000118bf2c [ 160.537143] ================================================================================ 09:59:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 09:59:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 09:59:38 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x148, &(0x7f00000002c0)="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"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 09:59:38 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001940)) 09:59:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 09:59:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1}) 09:59:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 160.745441] ptrace attach of "/root/syz-executor.0"[8361] was attempted by "/root/syz-executor.0"[8363] 09:59:39 executing program 4: pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040028bd7000fcdbdf2507000000080002000500000014000600000000000000000000008f8c0a020000"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000480)='./file0\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a46a2f00283afffe880000000000000000000000000001ff02000000000000000007000000000000009078006fad3fc2bdbf834400000000000000000000aafe880000000000000000000000000001"], 0x0) [ 161.035977] audit: type=1804 audit(1602064779.192:13): pid=8377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir568151897/syzkaller.ZzWIED/13/bus" dev="sda1" ino=15759 res=1 09:59:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x100, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0], 0xa4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYRES16, @ANYBLOB, @ANYBLOB], 0x28}}, 0x40001) [ 161.185520] audit: type=1804 audit(1602064779.302:14): pid=8369 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir212273590/syzkaller.ZbTJOQ/11/bus" dev="sda1" ino=15767 res=1 09:59:39 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ftruncate(r1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)="807ed3a798a87ceb932e7cf6a1761e6269d422226b6b7ef7e3db4477cdae67e6b55fe7dee4d9a3a140687bd419a9ca7bb3e5bd050e00dd4b87862ae008a84dab45d65f29ae8a1e35ca7f565ad3f731af7e0276cf80c28de75f44d3d9e698ced21b07785bdf1c4b7b359f8264e2d6e350847ca3602e11a9c7f142d6ad8f8b343125acc6060da440bee050df2edb99910b07b35771396ca6a771d637", 0x9b) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000240)='./file1\x00', 0xffbfffff, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="2216050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) umount2(&(0x7f0000000380)='./file1\x00', 0x0) 09:59:39 executing program 0: shmget$private(0x0, 0xd000, 0x19c1, &(0x7f0000ff2000/0xd000)=nil) 09:59:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 09:59:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fsync(r0) 09:59:39 executing program 4: syz_emit_ethernet(0x62, &(0x7f0000000140)={@link_local, @broadcast, @void, {@ipv4={0x800, @generic={{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x17, 0x0, [@dev, @rand_addr, @broadcast, @dev, @local]}, @rr={0x7, 0xf, 0x0, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 09:59:39 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace$poke(0xffffffffffffffff, r0, &(0x7f0000000140), 0x401) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:59:40 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x40000, 0x4) fcntl$setstatus(r0, 0x4, 0x6100) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffa, 0x4002011, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)=ANY=[], 0x40004) 09:59:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x2c}}, 0x0) 09:59:40 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000001c0)=0xfffffff7) [ 162.236100] audit: type=1800 audit(1602064780.422:15): pid=8434 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15825 res=0 09:59:40 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ftruncate(r1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)="807ed3a798a87ceb932e7cf6a1761e6269d422226b6b7ef7e3db4477cdae67e6b55fe7dee4d9a3a140687bd419a9ca7bb3e5bd050e00dd4b87862ae008a84dab45d65f29ae8a1e35ca7f565ad3f731af7e0276cf80c28de75f44d3d9e698ced21b07785bdf1c4b7b359f8264e2d6e350847ca3602e11a9c7f142d6ad8f8b343125acc6060da440bee050df2edb99910b07b35771396ca6a771d637", 0x9b) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000240)='./file1\x00', 0xffbfffff, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="2216050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[]) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) umount2(&(0x7f0000000380)='./file1\x00', 0x0) 09:59:40 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000001c0)=0xfffffff7) 09:59:40 executing program 2: r0 = socket(0x28, 0x1, 0x0) accept$phonet_pipe(r0, 0x0, 0x0) 09:59:40 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)) 09:59:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x105, 0x105, 0x4, [@union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @var, @var, @typedef, @datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], "f5"}, @typedef, @union={0x0, 0x5, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x124}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:59:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) r5 = dup2(r4, r2) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 09:59:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f00000001c0)) 09:59:41 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000100)=0xa000000000000000) 09:59:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004000)=[{{&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002400)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x82, 0xf, "2ff23e31df50f46e0ed2532bf4"}]}}}], 0x20}}], 0x1, 0x0) 09:59:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 09:59:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004000)=[{{&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002400)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x82, 0xf, "2ff23e31df50f46e0ed2532bf4"}]}}}], 0x20}}], 0x1, 0x0) 09:59:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r0, 0x0) 09:59:41 executing program 1: syz_mount_image$nfs(&(0x7f0000000500)='nfs\x00', 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001740)) 09:59:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x80, 0x88) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 09:59:41 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x31ba, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}) 09:59:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@deltaction={0x28, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}}, 0x0) [ 163.370592] audit: type=1804 audit(1602064781.552:16): pid=8514 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir568151897/syzkaller.ZzWIED/20/bus" dev="sda1" ino=15799 res=1 [ 164.074011] audit: type=1804 audit(1602064782.262:17): pid=8503 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir568151897/syzkaller.ZzWIED/20/bus" dev="sda1" ino=15799 res=1 [ 164.131402] audit: type=1800 audit(1602064782.312:18): pid=8514 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15799 res=0 [ 164.158129] audit: type=1800 audit(1602064782.312:19): pid=8503 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15799 res=0 09:59:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) add_key$user(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'michael_mic-generic\x00'}}) 09:59:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 09:59:44 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r1, r0, 0x0, 0x9000000800040ff) 09:59:44 executing program 1: pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettaction={0x14, 0x30, 0x309}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 09:59:44 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19a, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @local}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@empty}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000a811}, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) 09:59:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x80, 0x88) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 09:59:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 166.040978] audit: type=1804 audit(1602064784.222:20): pid=8543 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir568151897/syzkaller.ZzWIED/21/bus" dev="sda1" ino=15840 res=1 09:59:44 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9493564e"}, 0x0, 0x0, @userptr}) 09:59:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}]}, &(0x7f0000000140)=0x10) 09:59:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x4, 0x4000, 0x20}, 0x19) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r0, &(0x7f0000000780), &(0x7f0000000840)=@udp6, 0x2}, 0x20) 09:59:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)) 09:59:44 executing program 5: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x40000012) 09:59:44 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget$private(0x0, 0x0, 0x0) getpid() r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x7f}, {}], 0x2) 09:59:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) add_key$user(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'michael_mic-generic\x00'}}) 09:59:44 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19a, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @local}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@empty}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000a811}, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) 09:59:44 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$usbfs(r0, &(0x7f0000000100)=""/80, 0x50) 09:59:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x4, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], "f5"}, @const, @var]}, {0x0, [0x0, 0x0]}}, 0x0, 0xf8}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:59:44 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget$private(0x0, 0x0, 0x0) getpid() r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x7f}, {}], 0x2) 09:59:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget$private(0x0, 0x0, 0x0) getpid() r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x7f}, {}], 0x2) 09:59:45 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="a30f01fc260f54a2304b979701da66b92e0b00000f320fbd21f081a2b0001abe0fc799000066b99a09000066b80400000066ba000000003e3466f20f30", 0x3d}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x4800, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:59:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget$private(0x0, 0x0, 0x0) getpid() r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x7f}, {}], 0x2) 09:59:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x0, 0xfffffe01}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) 09:59:45 executing program 1: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 09:59:45 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r1, 0x0, 0xfeffffff, 0x100080000000000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup2(r2, r1) 09:59:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 09:59:45 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19a, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @local}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@empty}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000a811}, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) 09:59:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) add_key$user(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'michael_mic-generic\x00'}}) 09:59:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xf1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x200, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x705182, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 09:59:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x8180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x250, 0x150, 0x150, 0x250, 0x0, 0x388, 0x238, 0x238, 0x388, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@private1, [], @ipv4=@loopback}, {@ipv4=@empty, [], @ipv4=@remote}, {@ipv6=@loopback, [], @ipv4=@loopback}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@dev}], 0x6}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 09:59:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)) 09:59:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="8c", 0x1) r1 = accept$alg(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = dup(r1) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) [ 167.449869] xt_AUDIT: Audit type out of range (valid range: 0..2) 09:59:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x80, 0x0, 0x200b, 0xffffffff, 0x9, 0x0, 0xc7, 0x1}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000800)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setresgid(0x0, 0xee00, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffffffc, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 09:59:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0xa0102, 0x0) 09:59:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000005c0)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) [ 167.688437] audit: type=1800 audit(1602064785.872:21): pid=8651 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=15856 res=0 09:59:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x27024a}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @nl=@unspec, @ipx={0x4, 0x0, 0x0, "83cc6892d427", 0x3}, @nl=@unspec, 0x400, 0x0, 0x0, 0x0, 0x2f22, &(0x7f0000000080)='netdevsim0\x00', 0x9, 0x6, 0x6}) 09:59:46 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x19a, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0x0, 0x0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @local}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@empty}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000a811}, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) 09:59:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b47, &(0x7f0000000040)={0x1ff}) 09:59:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1005, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f000010000000000004001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a082101100000000093fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574e2954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861747472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000010300)) io_setup(0x200, &(0x7f0000000040)) 09:59:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) add_key$user(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'michael_mic-generic\x00'}}) 09:59:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="8c", 0x1) r1 = accept$alg(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = dup(r1) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 09:59:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b47, &(0x7f0000000040)={0x1ff}) 09:59:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="8c", 0x1) r1 = accept$alg(r0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = dup(r1) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 09:59:47 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6(0xa, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/211, 0xd3}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0xde, 0x0, 0x0) [ 169.157016] audit: type=1800 audit(1602064787.332:22): pid=8697 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=15872 res=0 09:59:47 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfd53) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x800, &(0x7f0000000300)={[{@fat=@nfs='nfs'}]}) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unlinkat(r2, &(0x7f0000001580)='./file0\x00', 0x200) [ 169.335238] audit: type=1800 audit(1602064787.402:23): pid=8698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=15873 res=0 09:59:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0xa0102, 0x0) 09:59:47 executing program 0: r0 = socket(0x23, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x113, 0x20, 0x0, 0x0) 09:59:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040)=0x80000001, 0x4) 09:59:47 executing program 2: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6cb, 0x1a0241) [ 169.583736] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:59:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "88db1f", 0x8, 0x11, 0x0, @local, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 09:59:47 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfd53) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x800, &(0x7f0000000300)={[{@fat=@nfs='nfs'}]}) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unlinkat(r2, &(0x7f0000001580)='./file0\x00', 0x200) 09:59:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) add_key$user(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'michael_mic-generic\x00'}}) 09:59:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfd53) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x800, &(0x7f0000000300)={[{@fat=@nfs='nfs'}]}) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unlinkat(r2, &(0x7f0000001580)='./file0\x00', 0x200) 09:59:48 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x28}, 0x1, 0x6c}, 0x0) 09:59:48 executing program 1: r0 = socket(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x10d, 0xf, 0x0, 0x36) 09:59:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @dev}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 09:59:48 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), 0x4) [ 170.052746] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 170.076143] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)