Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts.
[   39.382317] random: sshd: uninitialized urandom read (32 bytes read)
2019/07/30 09:26:26 fuzzer started
[   39.578098] audit: type=1400 audit(1564478786.563:36): avc:  denied  { map } for  pid=6921 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   41.621573] random: cc1: uninitialized urandom read (8 bytes read)
2019/07/30 09:26:29 dialing manager at 10.128.0.105:43819
2019/07/30 09:26:29 syscalls: 2463
2019/07/30 09:26:29 code coverage: enabled
2019/07/30 09:26:29 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/07/30 09:26:29 extra coverage: extra coverage is not supported by the kernel
2019/07/30 09:26:29 setuid sandbox: enabled
2019/07/30 09:26:29 namespace sandbox: enabled
2019/07/30 09:26:29 Android sandbox: /sys/fs/selinux/policy does not exist
2019/07/30 09:26:29 fault injection: enabled
2019/07/30 09:26:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/07/30 09:26:29 net packet injection: enabled
2019/07/30 09:26:29 net device setup: enabled
[   43.564389] random: crng init done
09:28:24 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, &(0x7f0000000040)=0x4)

09:28:24 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000002c0)={@remote})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x100)

09:28:24 executing program 3:
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000200)={0xb}, 0xb)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000097000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0)

09:28:24 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x94}]})

09:28:24 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x0, 0x0)
mknodat(r0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000240))
sendfile(r1, r2, 0x0, 0x8000fffffffe)

09:28:24 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mknodat(r0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(r2, 0x0, 0x0, &(0x7f0000000240))
sendfile(r1, r2, 0x0, 0x8000fffffffe)

[  157.955457] audit: type=1400 audit(1564478904.943:37): avc:  denied  { map } for  pid=6921 comm="syz-fuzzer" path="/root/syzkaller-shm846327207" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[  158.003042] audit: type=1400 audit(1564478904.963:38): avc:  denied  { map } for  pid=6939 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13810 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  158.790231] IPVS: ftp: loaded support on port[0] = 21
[  159.113696] chnl_net:caif_netlink_parms(): no params data found
[  159.122452] IPVS: ftp: loaded support on port[0] = 21
[  159.172033] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.178567] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.187095] device bridge_slave_0 entered promiscuous mode
[  159.199564] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.206004] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.213001] device bridge_slave_1 entered promiscuous mode
[  159.229756] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  159.239260] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  159.250991] IPVS: ftp: loaded support on port[0] = 21
[  159.267715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  159.276238] team0: Port device team_slave_0 added
[  159.283629] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  159.291589] team0: Port device team_slave_1 added
[  159.303220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  159.314078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  159.358655] chnl_net:caif_netlink_parms(): no params data found
[  159.402782] device hsr_slave_0 entered promiscuous mode
[  159.450399] device hsr_slave_1 entered promiscuous mode
[  159.503406] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  159.512782] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  159.536290] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.542759] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.549632] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.555985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.582318] IPVS: ftp: loaded support on port[0] = 21
[  159.604733] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.611260] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.618177] device bridge_slave_0 entered promiscuous mode
[  159.626570] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.633107] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.640006] device bridge_slave_1 entered promiscuous mode
[  159.693229] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  159.702449] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  159.726228] chnl_net:caif_netlink_parms(): no params data found
[  159.741750] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  159.748854] team0: Port device team_slave_0 added
[  159.756949] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  159.764193] team0: Port device team_slave_1 added
[  159.772735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  159.779987] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  159.794159] IPVS: ftp: loaded support on port[0] = 21
[  159.862229] device hsr_slave_0 entered promiscuous mode
[  159.910332] device hsr_slave_1 entered promiscuous mode
[  159.950768] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  159.958601] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  160.005562] chnl_net:caif_netlink_parms(): no params data found
[  160.066445] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.072891] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.080780] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.087165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.096936] IPVS: ftp: loaded support on port[0] = 21
[  160.124131] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.130653] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.137478] device bridge_slave_0 entered promiscuous mode
[  160.149974] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.157115] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.164119] device bridge_slave_1 entered promiscuous mode
[  160.170499] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.176830] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.184164] device bridge_slave_0 entered promiscuous mode
[  160.191595] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.197939] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.205554] device bridge_slave_1 entered promiscuous mode
[  160.228336] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.235620] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.244684] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.251429] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.275179] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  160.286217] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  160.297486] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  160.319224] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  160.369135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  160.376646] team0: Port device team_slave_0 added
[  160.382461] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  160.389488] team0: Port device team_slave_1 added
[  160.409135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  160.416719] team0: Port device team_slave_0 added
[  160.423538] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.429726] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  160.436907] team0: Port device team_slave_1 added
[  160.442196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  160.449389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  160.461531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  160.496127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  160.514145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  160.527098] chnl_net:caif_netlink_parms(): no params data found
[  160.602151] device hsr_slave_0 entered promiscuous mode
[  160.640578] device hsr_slave_1 entered promiscuous mode
[  160.682172] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  160.688536] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  160.699186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  160.706510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.762258] device hsr_slave_0 entered promiscuous mode
[  160.800317] device hsr_slave_1 entered promiscuous mode
[  160.850951] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  160.857875] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  160.865157] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  160.876052] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  160.883976] 8021q: adding VLAN 0 to HW filter on device team0
[  160.903249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  160.925972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  160.933991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.942464] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.948843] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.976861] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  160.984828] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  160.996696] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.004607] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.011584] device bridge_slave_0 entered promiscuous mode
[  161.018966] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.032836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  161.039925] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.048652] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.055791] device bridge_slave_1 entered promiscuous mode
[  161.073503] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  161.085384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.093138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.100781] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.107110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.115371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  161.168400] chnl_net:caif_netlink_parms(): no params data found
[  161.177357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  161.189415] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  161.199129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  161.209476] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  161.224322] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  161.237455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  161.245471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.252586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.261244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  161.269188] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  161.275997] 8021q: adding VLAN 0 to HW filter on device team0
[  161.310884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.318517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.326241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  161.335436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  161.344195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  161.353475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  161.361777] team0: Port device team_slave_0 added
[  161.367532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.375185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.382842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.390606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.398103] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.404482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.413643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  161.439011] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.445826] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  161.452947] team0: Port device team_slave_1 added
[  161.458323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.465887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  161.474441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  161.489377] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.498322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  161.506803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  161.514366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.523777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.531631] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.537966] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.544959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.553070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.561515] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.567850] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.575358] device bridge_slave_0 entered promiscuous mode
[  161.583944] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.590726] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.597660] device bridge_slave_1 entered promiscuous mode
[  161.615413] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  161.634525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  161.643709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  161.651042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  161.659051] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  161.668280] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  161.678959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  161.686878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  161.733477] device hsr_slave_0 entered promiscuous mode
[  161.770501] device hsr_slave_1 entered promiscuous mode
[  161.810882] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  161.816902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.826100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  161.836783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  161.850157] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  161.857359] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  161.867733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  161.875026] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  161.882036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.889921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.897498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.904382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.911484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.918264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.925152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  161.943651] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  161.949724] 8021q: adding VLAN 0 to HW filter on device team0
[  161.959411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  161.969387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  161.977624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  161.987266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  161.995094] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  162.004639] team0: Port device team_slave_0 added
[  162.010398] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  162.018589] team0: Port device team_slave_1 added
[  162.024403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.032234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.039713] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.046085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.053821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.061649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.069128] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.075496] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.084141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.091828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.099238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.107027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.115793] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  162.122687] 8021q: adding VLAN 0 to HW filter on device team0
[  162.132174] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  162.142628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  162.151912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  162.163631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  162.173546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.180597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.187946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.196984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  162.212821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  162.226443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  162.235150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.242965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.250885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.258519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.266447] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.273007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.279808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.291812] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  162.300664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  162.309386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  162.326159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  162.334648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.342515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.349960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.358873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.366476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.374296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.381847] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.388222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.395216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.405104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  162.462299] device hsr_slave_0 entered promiscuous mode
[  162.520931] device hsr_slave_1 entered promiscuous mode
[  162.560819] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  162.567940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.577746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.588153] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  162.602252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  162.616055] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.624069] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  162.636730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.644708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.656896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  162.664738] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  162.671485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.686850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.696016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.712531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  162.731059] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  162.741214] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  162.747482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.757949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  162.767723] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.777740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.786564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.798156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  162.812851] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  162.822723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.829243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.836963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.845228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.855010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  162.869036] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  162.879573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.895671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.909943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.928499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.948405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  162.961472] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  162.967570] 8021q: adding VLAN 0 to HW filter on device team0
[  162.974386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
09:28:30 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, &(0x7f0000000040)=0x4)

[  162.984861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.003144] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  163.009189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.024981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
09:28:30 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, &(0x7f0000000040)=0x4)

[  163.107405] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  163.114887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  163.123583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.131208] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.137662] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.145251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  163.176195] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.196034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  163.238663] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  163.248476] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  163.257655] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  163.274659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  163.282541] EXT4-fs error (device loop3): ext4_iget:4696: inode #2: comm syz-executor.3: root inode unallocated
[  163.294081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.301809] EXT4-fs (loop3): get root inode failed
[  163.301828] EXT4-fs (loop3): mount failed
[  163.307670] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.317289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.326484] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
09:28:30 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x46, 0x0, &(0x7f0000000040)=0x4)

09:28:30 executing program 3:
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000200)={0xb}, 0xb)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000097000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0)

[  163.335104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  163.351808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.361083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.371167] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  163.379450] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
09:28:30 executing program 5:
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)=""/79)

09:28:30 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600))
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000002c0)={@remote})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x100)

[  163.417428] 8021q: adding VLAN 0 to HW filter on device team0
[  163.431963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  163.440987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  163.447932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
09:28:30 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x40000000000026d, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_mr_cache\x00\x8f0_~C\xee\x17\x833\x8ct&\xbagN\xfc\r\xe1Z\xf6f)\x00\xbevXNSn\x8ci\x8e\xfc\xf2?\n\x8a\xd0\x80B\b\x00MV\xa6\xf4\xfb\x13\xce\x136~\xfa\x8f\x83qu[\x89\x12q\xb8pP\xe67\xd0&u8\xa3l\x86\x19\x97u\xed\xb2N\x8a\x17\a%\xe8\x97\x108\x03\xfd\xfcV54\xdee\xbc\x01\x00;\xe4H0\xd9\x00f\xb4\xfc\xa9sw9\xd5\xf1r\xa4\xc3\x1f\xef\x85;\xf9\xe4\xa9\bE\x9a\xdb\xab\x05\x0f\x9f\xe0S&\xe0\xd5\x92\xcc\xaf?\x9c\xc6\x80\x1d6\xd7\x7f\xee\xda\x1a\x9b\xce\xc3\xcd\xd0\x1c')
preadv(r0, &(0x7f00000017c0), 0x3a8, 0xf0ff7f)

[  163.484018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.509066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  163.521440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  163.539897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  163.541743] hrtimer: interrupt took 26124 ns
[  163.551283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.566489] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  163.577296] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.583696] bridge0: port 1(bridge_slave_0) entered forwarding state
09:28:30 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x40000000000026d, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_mr_cache\x00\x8f0_~C\xee\x17\x833\x8ct&\xbagN\xfc\r\xe1Z\xf6f)\x00\xbevXNSn\x8ci\x8e\xfc\xf2?\n\x8a\xd0\x80B\b\x00MV\xa6\xf4\xfb\x13\xce\x136~\xfa\x8f\x83qu[\x89\x12q\xb8pP\xe67\xd0&u8\xa3l\x86\x19\x97u\xed\xb2N\x8a\x17\a%\xe8\x97\x108\x03\xfd\xfcV54\xdee\xbc\x01\x00;\xe4H0\xd9\x00f\xb4\xfc\xa9sw9\xd5\xf1r\xa4\xc3\x1f\xef\x85;\xf9\xe4\xa9\bE\x9a\xdb\xab\x05\x0f\x9f\xe0S&\xe0\xd5\x92\xcc\xaf?\x9c\xc6\x80\x1d6\xd7\x7f\xee\xda\x1a\x9b\xce\xc3\xcd\xd0\x1c')
preadv(r0, &(0x7f00000017c0), 0x3a8, 0xf0ff7f)

[  163.595845] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  163.605506] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  163.619582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  163.629203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
09:28:30 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil})
syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@dev}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  163.633643] EXT4-fs error (device loop3): ext4_iget:4696: inode #2: comm syz-executor.3: root inode unallocated
[  163.647353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  163.659554] EXT4-fs (loop3): get root inode failed
[  163.670839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  163.678248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  163.683916] EXT4-fs (loop3): mount failed
[  163.685880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.718431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  163.734384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.746670] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  163.762873] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.769299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.776634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  163.784904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.797599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  163.800206] audit: type=1400 audit(1564478910.783:39): avc:  denied  { create } for  pid=7037 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  163.832334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  163.835389] audit: type=1400 audit(1564478910.783:40): avc:  denied  { write } for  pid=7037 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  163.843125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.865943] audit: type=1400 audit(1564478910.783:41): avc:  denied  { read } for  pid=7037 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  163.910885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.924395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.945664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  163.956870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  163.964942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.977380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.986348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.001712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  164.013908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  164.022978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  164.035079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  164.043632] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  164.049689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  164.058907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  164.074092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  164.082400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  164.093932] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  164.103263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  164.120919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  164.128838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  164.173771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.182664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  164.189801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  164.198300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.217569] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
09:28:31 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x100000008001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x9, 0x7, 0x0, 0x0, 0xa14, 0x20000, 0xb, 0x6, 0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x3, 0x10001, 0x5, 0x12, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x100, 0x0, 0x0, 0x8, 0x7fff, 0x3, 0x7, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x3, 0x7f}, 0x10808, 0x200, 0xee54, 0x2, 0x2, 0x0, 0x1}, 0x0, 0x0, r1, 0x9)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xec2d, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))

[  164.225137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  164.244355] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  164.256542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.319814] audit: type=1804 audit(1564478912.303:42): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir574124471/syzkaller.Jtb5uN/0/bus" dev="sda1" ino=16540 res=1
[  165.347056] audit: type=1800 audit(1564478912.313:43): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16540 res=0
[  165.509555] audit: type=1804 audit(1564478912.493:44): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir275234218/syzkaller.ghvzcQ/0/bus" dev="sda1" ino=16545 res=1
09:28:32 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x0, 0x0)
mknodat(r0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000240))
sendfile(r1, r2, 0x0, 0x8000fffffffe)

[  165.548012] audit: type=1804 audit(1564478912.513:45): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir574124471/syzkaller.Jtb5uN/0/bus" dev="sda1" ino=16540 res=1
[  165.633983] audit: type=1800 audit(1564478912.513:46): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=16540 res=0
[  165.661849] audit: type=1800 audit(1564478912.523:47): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16545 res=0
09:28:32 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mknodat(r0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(r2, 0x0, 0x0, &(0x7f0000000240))
sendfile(r1, r2, 0x0, 0x8000fffffffe)

09:28:32 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)

09:28:32 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

09:28:32 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
sendmsg$inet(r0, &(0x7f0000002900)={&(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0x0)

09:28:32 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x100000008001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x9, 0x7, 0x0, 0x0, 0xa14, 0x20000, 0xb, 0x6, 0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x3, 0x10001, 0x5, 0x12, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x100, 0x0, 0x0, 0x8, 0x7fff, 0x3, 0x7, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x3, 0x7f}, 0x10808, 0x200, 0xee54, 0x2, 0x2, 0x0, 0x1}, 0x0, 0x0, r1, 0x9)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xec2d, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))

[  165.706059] audit: type=1804 audit(1564478912.683:48): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir574124471/syzkaller.Jtb5uN/1/bus" dev="sda1" ino=16540 res=1
09:28:32 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mknodat(r0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(r2, 0x0, 0x0, &(0x7f0000000240))
sendfile(r1, r2, 0x0, 0x8000fffffffe)

09:28:32 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mknodat(r0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(r2, 0x0, 0x0, &(0x7f0000000240))
sendfile(r1, r2, 0x0, 0x8000fffffffe)

09:28:32 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x0, 0x0)
mknodat(r0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000240))
sendfile(r1, r2, 0x0, 0x8000fffffffe)

09:28:33 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x0, 0x0)
mknodat(r0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(r2, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000240))
sendfile(r1, r2, 0x0, 0x8000fffffffe)

09:28:33 executing program 2:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setitimer(0x0, 0x0, 0x0)

[  166.655083] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
09:28:33 executing program 2:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)
getpid()
openat$vsock(0xffffffffffffff9c, 0x0, 0x8000, 0x0)

09:28:33 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
stat(0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x20, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x38}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

09:28:33 executing program 3:
write(0xffffffffffffffff, &(0x7f0000000000)="f984369e50f63bd2b0d75b336459e11cc4ad32bb874dd7c42ca88f656d494c46fefdf29c27fe36711e959b0c21fd08b82224b05bb5b22ada3cbbb137bea6a21d2933dc8f909bc33f98e57717aeb940299950df46a17d8bf9f5ae55874f5a244728ed7623d88b0f56170767bfbc317eade16d207d708cb093b19ca78f73672385e8943caa9e0d7cf41425110c9d0fbfb54b53ec994442abaf1ef9", 0x9a)
r0 = syz_open_dev$evdev(&(0x7f0000001580)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0)
lstat(0x0, 0x0)
getgid()
creat(&(0x7f0000000380)='./bus\x00', 0x0)
write$FUSE_POLL(0xffffffffffffffff, 0x0, 0xe8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2@\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1eu\xa1T\xd7d\x9a`=^h\x8c8\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\xd5\x16\xde\xa09\xe2\xaa\x90\x958\xd6\xe6', 0x2761, 0x0)
write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0)
r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x4002091, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c)

09:28:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:33 executing program 1:
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x327, &(0x7f0000000080)={&(0x7f00000002c0)=@newsa={0x140, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xb}]}, 0x3c3}}, 0x0)

09:28:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084)
r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r0, r1, 0x0, 0x102000002)

09:28:33 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x100000008001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x9, 0x9, 0x7, 0x9, 0x0, 0xa14, 0x0, 0xb, 0x6, 0x1f, 0xffffffffffffffff, 0x6, 0x3, 0x3, 0x3, 0x10001, 0x0, 0x12, 0x2b6f7447, 0x4, 0xff, 0x56ea, 0x0, 0x8000, 0x0, 0x80, 0xd93, 0x4, 0x100, 0x8, 0x9, 0x8, 0x7fff, 0x3, 0x7, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x7f}, 0x10808, 0x200, 0x0, 0x0, 0x0, 0x6, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x9)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4)
creat(0x0, 0x0)

09:28:34 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xc9, 0x0, 0x0)

09:28:34 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
stat(0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x20, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x38}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  167.069537] overlayfs: filesystem on './file0' not supported as upperdir
[  167.100395] print_req_error: I/O error, dev loop0, sector 0
09:28:34 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x100000008001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x9, 0x9, 0x7, 0x9, 0x0, 0xa14, 0x0, 0xb, 0x6, 0x1f, 0xffffffffffffffff, 0x6, 0x3, 0x3, 0x3, 0x10001, 0x0, 0x12, 0x2b6f7447, 0x4, 0xff, 0x56ea, 0x0, 0x8000, 0x0, 0x80, 0xd93, 0x4, 0x100, 0x8, 0x9, 0x8, 0x7fff, 0x3, 0x7, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x7f}, 0x10808, 0x200, 0x0, 0x0, 0x0, 0x6, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x9)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4)
creat(0x0, 0x0)

09:28:34 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x100000008001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x9, 0x9, 0x7, 0x9, 0x0, 0xa14, 0x0, 0xb, 0x6, 0x1f, 0xffffffffffffffff, 0x6, 0x3, 0x3, 0x3, 0x10001, 0x0, 0x12, 0x2b6f7447, 0x4, 0xff, 0x56ea, 0x0, 0x8000, 0x0, 0x80, 0xd93, 0x4, 0x100, 0x8, 0x9, 0x8, 0x7fff, 0x3, 0x7, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x7f}, 0x10808, 0x200, 0x0, 0x0, 0x0, 0x6, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x9)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4)
creat(0x0, 0x0)

09:28:34 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="85000000290000007700000000000000950000000000000091410f73117987fda80015360ae0e2adb6943c610f950560816dfac51316b0bbad1d2f5787cdce92ba5aa7de992250b27a525b31f2bdd6e0905f38b0dc15b4d6488756b8e95a34453a3eddb3ec5ef44beafbeb7d2ee16745bceda8341fd1e43725e6a3b56749d3e7ee29b6610a3db0"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x19e8a36fbc883b23}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0}, 0x28)

09:28:34 executing program 3:
write(0xffffffffffffffff, &(0x7f0000000000)="f984369e50f63bd2b0d75b336459e11cc4ad32bb874dd7c42ca88f656d494c46fefdf29c27fe36711e959b0c21fd08b82224b05bb5b22ada3cbbb137bea6a21d2933dc8f909bc33f98e57717aeb940299950df46a17d8bf9f5ae55874f5a244728ed7623d88b0f56170767bfbc317eade16d207d708cb093b19ca78f73672385e8943caa9e0d7cf41425110c9d0fbfb54b53ec994442abaf1ef9", 0x9a)
r0 = syz_open_dev$evdev(&(0x7f0000001580)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0)
lstat(0x0, 0x0)
getgid()
creat(&(0x7f0000000380)='./bus\x00', 0x0)
write$FUSE_POLL(0xffffffffffffffff, 0x0, 0xe8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2@\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1eu\xa1T\xd7d\x9a`=^h\x8c8\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\xd5\x16\xde\xa09\xe2\xaa\x90\x958\xd6\xe6', 0x2761, 0x0)
write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0)
r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x4002091, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c)

09:28:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:34 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast1}, 'bridge_slave_1\x00'})

09:28:34 executing program 1:
r0 = socket$inet_sctp(0x2, 0x801, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001500)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000000c0)="cf", 0x1}], 0x1, &(0x7f00000014c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x0)

09:28:34 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
stat(0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x20, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x38}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

09:28:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000704000/0x1000)=nil, 0x1000)
munlockall()

09:28:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
timer_create(0x0, 0x0, &(0x7f0000000100))
timer_gettime(0x0, &(0x7f0000000140))

09:28:34 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x502, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x2000000080200)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x2, 0x10000, 0x26})

09:28:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000704000/0x1000)=nil, 0x1000)
munlockall()

09:28:34 executing program 2:
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='meta,statfs_quantum=0x0000000000000007,localcaching,errors=w'])

09:28:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x71e0828708890078)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0xfffffffffffffe99)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  167.870009] gfs2: invalid mount option: errors=w
09:28:34 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
stat(0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x20, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x38}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  167.914328] gfs2: can't parse mount arguments
09:28:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

[  168.003707] gfs2: invalid mount option: errors=w
[  168.008708] gfs2: can't parse mount arguments
09:28:35 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x100000008001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x9, 0x7, 0x9, 0x0, 0xa14, 0x20000, 0xb, 0x6, 0x1f, 0xffffffffffffffff, 0x6, 0x3, 0x3, 0x3, 0x10001, 0x0, 0x12, 0x2b6f7447, 0x4, 0xff, 0x56ea, 0x1, 0x0, 0x3, 0x80, 0xd93, 0x4, 0x100, 0x8, 0x0, 0x8, 0x0, 0x3, 0x7, 0xf3, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x7f}, 0x0, 0x200, 0xee54, 0x2, 0x2, 0x6, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x9)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xec2d, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))
creat(0x0, 0x0)

09:28:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x71e0828708890078)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0xfffffffffffffe99)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:28:35 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x100000008001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x9, 0x7, 0x9, 0x0, 0xa14, 0x20000, 0xb, 0x6, 0x1f, 0xffffffffffffffff, 0x6, 0x3, 0x3, 0x3, 0x10001, 0x0, 0x12, 0x2b6f7447, 0x4, 0xff, 0x56ea, 0x1, 0x0, 0x3, 0x80, 0xd93, 0x4, 0x100, 0x8, 0x0, 0x8, 0x0, 0x3, 0x7, 0xf3, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x7f}, 0x0, 0x200, 0xee54, 0x2, 0x2, 0x6, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x9)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xec2d, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))
creat(0x0, 0x0)

09:28:35 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0x100000008001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x9, 0x7, 0x9, 0x0, 0xa14, 0x20000, 0xb, 0x6, 0x1f, 0xffffffffffffffff, 0x6, 0x3, 0x3, 0x3, 0x10001, 0x0, 0x12, 0x2b6f7447, 0x4, 0xff, 0x56ea, 0x1, 0x0, 0x3, 0x80, 0xd93, 0x4, 0x100, 0x8, 0x0, 0x8, 0x0, 0x3, 0x7, 0xf3, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x7f}, 0x0, 0x200, 0xee54, 0x2, 0x2, 0x6, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x9)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xec2d, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000))
creat(0x0, 0x0)

09:28:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000704000/0x1000)=nil, 0x1000)
munlockall()

09:28:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x71e0828708890078)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0xfffffffffffffe99)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:28:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000704000/0x1000)=nil, 0x1000)
munlockall()

09:28:37 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040), 0x10)
poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0)

09:28:37 executing program 2:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0)

09:28:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000704000/0x1000)=nil, 0x1000)
munlockall()

09:28:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000704000/0x1000)=nil, 0x1000)
munlockall()

09:28:37 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000704000/0x1000)=nil, 0x1000)
munlockall()

09:28:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:38 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001800)=ANY=[@ANYRESDEC], 0x0)
vmsplice(r0, &(0x7f0000000140), 0x341, 0x0)

09:28:38 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:38 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:39 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0))

09:28:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4)

09:28:39 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:39 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x9, 0x4)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x3f5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x61)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000340)=0x4, 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)

09:28:39 executing program 3:
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000002c0)={@remote, 0x19})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
socket$inet6(0xa, 0x2, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)

09:28:39 executing program 5:
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

09:28:39 executing program 4:
syz_open_dev$admmidi(0x0, 0x0, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="3058020af10cb8b56c9606987fe808d672bd136840d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a939b4fd2672693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b269", 0x5a, 0xfffffffffffffffd)

09:28:39 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@resize={'resize'}}]})

09:28:39 executing program 2:
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000740))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x34202]}, @empty, @loopback})

09:28:39 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0)

09:28:39 executing program 5:
r0 = memfd_create(&(0x7f0000000240)='t\bnu\x8c\xc4', 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c)

[  172.609890] ==================================================================
[  172.617414] BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0
[  172.617428] Read of size 8 at addr ffffffff8677bbb8 by task syz-executor.0/7327
[  172.617430] 
[  172.617443] CPU: 0 PID: 7327 Comm: syz-executor.0 Not tainted 4.14.134 #30
[  172.617449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  172.617454] Call Trace:
[  172.617473]  dump_stack+0x138/0x19c
[  172.617485]  ? strscpy+0x20e/0x2c0
[  172.617500]  print_address_description.cold+0x5/0x1dc
[  172.617510]  ? strscpy+0x20e/0x2c0
[  172.631430]  kasan_report.cold+0xa9/0x2af
[  172.631448]  __asan_report_load8_noabort+0x14/0x20
[  172.631462]  strscpy+0x20e/0x2c0
[  172.631476]  prepare_error_buf+0x94/0x1aa0
[  172.631488]  ? lock_downgrade+0x6e0/0x6e0
[  172.631500]  ? scnprintf_le_key+0x600/0x600
[  172.631513]  ? _parse_integer+0xe8/0x140
[  172.631528]  __reiserfs_warning+0x9f/0xb0
[  172.636457] kobject: 'queues' (ffff88809513a248): kobject_add_internal: parent: 'þ€', set: '<NULL>'
[  172.640144]  ? reiserfs_printk+0xd0/0xd0
[  172.640154]  ? ip6_string+0x3b0/0x3b0
[  172.640176]  reiserfs_parse_options+0xa16/0x1820
[  172.640192]  ? reiserfs_sync_fs+0xe0/0xe0
[  172.640205]  ? trace_hardirqs_on+0x10/0x10
[  172.640278]  ? workqueue_sysfs_register+0x3c0/0x3c0
[  172.649992] kobject: 'queues' (ffff88809513a248): kobject_uevent_env
[  172.652152]  ? lockdep_init_map+0x9/0x10
[  172.652162]  ? debug_mutex_init+0x2d/0x5a
[  172.652176]  reiserfs_fill_super+0x461/0x2b20
[  172.652195]  ? finish_unfinished+0x1010/0x1010
[  172.652218]  ? snprintf+0xa5/0xd0
[  172.655945] kobject: 'queues' (ffff88809513a248): kobject_uevent_env: filter function caused the event to drop!
[  172.659353]  ? set_blocksize+0x270/0x300
[  172.659363]  ? ns_test_super+0x50/0x50
[  172.659378]  mount_bdev+0x2be/0x370
[  172.659387]  ? finish_unfinished+0x1010/0x1010
[  172.659400]  get_super_block+0x35/0x40
[  172.659410]  mount_fs+0x97/0x2a1
[  172.659424]  vfs_kern_mount.part.0+0x5e/0x3d0
[  172.659436]  do_mount+0x417/0x27d0
[  172.664921] kobject: 'rx-0' (ffff8880a9b5db50): kobject_add_internal: parent: 'queues', set: 'queues'
[  172.668115]  ? copy_mount_options+0x5c/0x2f0
[  172.668127]  ? rcu_read_lock_sched_held+0x110/0x130
[  172.668141]  ? copy_mount_string+0x40/0x40
[  172.668156]  ? copy_mount_options+0x1fe/0x2f0
[  172.668170]  SyS_mount+0xab/0x120
[  172.668178]  ? copy_mnt_ns+0x8c0/0x8c0
[  172.668190]  do_syscall_64+0x1e8/0x640
[  172.673071] kobject: 'rx-0' (ffff8880a9b5db50): kobject_uevent_env
[  172.677220]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  172.677236]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  172.677245] RIP: 0033:0x45c27a
[  172.677250] RSP: 002b:00007f03e74cea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  172.677261] RAX: ffffffffffffffda RBX: 00007f03e74ceb40 RCX: 000000000045c27a
[  172.677268] RDX: 00007f03e74ceae0 RSI: 0000000020000200 RDI: 00007f03e74ceb00
[  172.677274] RBP: 0000000000000000 R08: 00007f03e74ceb40 R09: 00007f03e74ceae0
[  172.677279] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000005
[  172.677285] R13: 00000000004c8a7f R14: 00000000004df8b8 R15: 00000000ffffffff
[  172.677300] 
[  172.681035] kobject: 'rx-0' (ffff8880a9b5db50): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/rx-0'
[  172.684851] The buggy address belongs to the variable:
[  172.684861]  __func__.31301+0x798/0x3a60
[  172.684863] 
[  172.684866] Memory state around the buggy address:
[  172.684875]  ffffffff8677ba80: fa fa fa fa 00 02 fa fa fa fa fa fa 00 02 fa fa
[  172.684885]  ffffffff8677bb00: fa fa fa fa 06 fa fa fa fa fa fa fa 07 fa fa fa
[  172.684892] >ffffffff8677bb80: fa fa fa fa 00 00 00 02 fa fa fa fa 00 03 fa fa
[  172.684897]                                         ^
[  172.684904]  ffffffff8677bc00: fa fa fa fa 00 00 03 fa fa fa fa fa 00 03 fa fa
[  172.684911]  ffffffff8677bc80: fa fa fa fa 00 03 fa fa fa fa fa fa 00 00 00 00
[  172.684915] ==================================================================
[  172.684920] Disabling lock debugging due to kernel taint
[  172.691081] kobject: 'tx-0' (ffff8880865f9a58): kobject_add_internal: parent: 'queues', set: 'queues'
[  172.694350] Kernel panic - not syncing: panic_on_warn set ...
[  172.694350] 
[  172.698786] kobject: 'tx-0' (ffff8880865f9a58): kobject_uevent_env
[  172.701577] CPU: 0 PID: 7327 Comm: syz-executor.0 Tainted: G    B           4.14.134 #30
[  172.701583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  172.701586] Call Trace:
[  172.701599]  dump_stack+0x138/0x19c
[  172.701609]  ? strscpy+0x20e/0x2c0
[  172.701617]  panic+0x1f2/0x426
[  172.701624]  ? add_taint.cold+0x16/0x16
[  172.701639]  kasan_end_report+0x47/0x4f
[  172.701646]  kasan_report.cold+0x130/0x2af
[  172.701656]  __asan_report_load8_noabort+0x14/0x20
[  172.701665]  strscpy+0x20e/0x2c0
[  172.701676]  prepare_error_buf+0x94/0x1aa0
[  172.701687]  ? lock_downgrade+0x6e0/0x6e0
[  172.701696]  ? scnprintf_le_key+0x600/0x600
[  172.701707]  ? _parse_integer+0xe8/0x140
[  172.701717]  __reiserfs_warning+0x9f/0xb0
[  172.701724]  ? reiserfs_printk+0xd0/0xd0
[  172.701731]  ? ip6_string+0x3b0/0x3b0
[  172.701744]  reiserfs_parse_options+0xa16/0x1820
[  172.701755]  ? reiserfs_sync_fs+0xe0/0xe0
[  172.701764]  ? trace_hardirqs_on+0x10/0x10
[  172.701807]  ? workqueue_sysfs_register+0x3c0/0x3c0
[  172.701817]  ? lockdep_init_map+0x9/0x10
[  172.701825]  ? debug_mutex_init+0x2d/0x5a
[  172.701835]  reiserfs_fill_super+0x461/0x2b20
[  172.701847]  ? finish_unfinished+0x1010/0x1010
[  172.701858]  ? snprintf+0xa5/0xd0
[  172.701871]  ? set_blocksize+0x270/0x300
[  172.701881]  ? ns_test_super+0x50/0x50
[  172.701891]  mount_bdev+0x2be/0x370
[  172.701899]  ? finish_unfinished+0x1010/0x1010
[  172.701907]  get_super_block+0x35/0x40
[  172.701915]  mount_fs+0x97/0x2a1
[  172.701927]  vfs_kern_mount.part.0+0x5e/0x3d0
[  172.701937]  do_mount+0x417/0x27d0
[  172.701946]  ? copy_mount_options+0x5c/0x2f0
[  172.701956]  ? rcu_read_lock_sched_held+0x110/0x130
[  172.701967]  ? copy_mount_string+0x40/0x40
[  172.701978]  ? copy_mount_options+0x1fe/0x2f0
[  172.701988]  SyS_mount+0xab/0x120
[  172.701995]  ? copy_mnt_ns+0x8c0/0x8c0
[  172.702006]  do_syscall_64+0x1e8/0x640
[  172.702014]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  172.702025]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  172.702032] RIP: 0033:0x45c27a
[  172.702036] RSP: 002b:00007f03e74cea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  172.702045] RAX: ffffffffffffffda RBX: 00007f03e74ceb40 RCX: 000000000045c27a
[  172.702050] RDX: 00007f03e74ceae0 RSI: 0000000020000200 RDI: 00007f03e74ceb00
[  172.702056] RBP: 0000000000000000 R08: 00007f03e74ceb40 R09: 00007f03e74ceae0
[  172.702060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000005
[  172.702065] R13: 00000000004c8a7f R14: 00000000004df8b8 R15: 00000000ffffffff
[  172.703070] Kernel Offset: disabled
[  173.255295] Rebooting in 86400 seconds..