[ 40.188892][ T26] audit: type=1800 audit(1568993817.647:26): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.247230][ T26] audit: type=1800 audit(1568993817.647:27): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.267345][ T26] audit: type=1800 audit(1568993817.657:28): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.926607][ T26] audit: type=1800 audit(1568993818.407:29): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.222' (ECDSA) to the list of known hosts. 2019/09/20 15:37:07 fuzzer started syzkaller login: [ 50.822044][ T7814] as (7814) used greatest stack depth: 23592 bytes left 2019/09/20 15:37:08 dialing manager at 10.128.0.26:43553 2019/09/20 15:37:08 syscalls: 2493 2019/09/20 15:37:08 code coverage: enabled 2019/09/20 15:37:08 comparison tracing: enabled 2019/09/20 15:37:08 extra coverage: extra coverage is not supported by the kernel 2019/09/20 15:37:08 setuid sandbox: enabled 2019/09/20 15:37:08 namespace sandbox: enabled 2019/09/20 15:37:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/20 15:37:08 fault injection: enabled 2019/09/20 15:37:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/20 15:37:08 net packet injection: enabled 2019/09/20 15:37:08 net device setup: enabled 15:38:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) 15:38:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) [ 114.017785][ T7820] IPVS: ftp: loaded support on port[0] = 21 [ 114.091278][ T7822] IPVS: ftp: loaded support on port[0] = 21 15:38:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) close(r0) seccomp(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007fc00000}]}) close(r0) [ 114.174204][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 114.212968][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.221210][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.237290][ T7820] device bridge_slave_0 entered promiscuous mode [ 114.253452][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.277314][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.285128][ T7820] device bridge_slave_1 entered promiscuous mode [ 114.329964][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.347112][ T7825] IPVS: ftp: loaded support on port[0] = 21 [ 114.368440][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.413664][ T7822] chnl_net:caif_netlink_parms(): no params data found [ 114.441776][ T7820] team0: Port device team_slave_0 added 15:38:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='dummy0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 114.469368][ T7820] team0: Port device team_slave_1 added [ 114.580409][ T7820] device hsr_slave_0 entered promiscuous mode [ 114.617577][ T7820] device hsr_slave_1 entered promiscuous mode 15:38:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='dummy0\x00', 0x10) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 114.686761][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.694008][ T7820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.701995][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.709119][ T7820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.770649][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.780497][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.808732][ T7822] device bridge_slave_0 entered promiscuous mode [ 114.822720][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.833996][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.843174][ T7822] device bridge_slave_1 entered promiscuous mode 15:38:12 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = dup(r0) flistxattr(0xffffffffffffffff, 0x0, 0x302) timer_create(0x0, 0x0, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0xffffffffffffff20) write$P9_RFLUSH(r1, 0x0, 0x0) [ 114.870632][ T7829] IPVS: ftp: loaded support on port[0] = 21 [ 114.883955][ T7832] IPVS: ftp: loaded support on port[0] = 21 [ 114.915397][ T7825] chnl_net:caif_netlink_parms(): no params data found [ 114.939406][ T7822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.950874][ T7822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.032867][ T7822] team0: Port device team_slave_0 added [ 115.040684][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.048237][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.055887][ T7825] device bridge_slave_0 entered promiscuous mode [ 115.064603][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.071740][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.080025][ T7825] device bridge_slave_1 entered promiscuous mode [ 115.099538][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.102682][ T7834] IPVS: ftp: loaded support on port[0] = 21 [ 115.107891][ T7822] team0: Port device team_slave_1 added [ 115.146940][ T7825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.174083][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.183542][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.191872][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 115.215186][ T7825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.289674][ T7822] device hsr_slave_0 entered promiscuous mode [ 115.337631][ T7822] device hsr_slave_1 entered promiscuous mode [ 115.407405][ T7822] debugfs: Directory 'hsr0' with parent '/' already present! [ 115.416212][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.424580][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.443205][ T7825] team0: Port device team_slave_0 added [ 115.451961][ T7825] team0: Port device team_slave_1 added [ 115.460331][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.569872][ T7825] device hsr_slave_0 entered promiscuous mode [ 115.607662][ T7825] device hsr_slave_1 entered promiscuous mode [ 115.677299][ T7825] debugfs: Directory 'hsr0' with parent '/' already present! [ 115.711866][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.721212][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.729934][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.737145][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.783792][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.794124][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.802793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.809905][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.818779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.827403][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.835900][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.844409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.852823][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.861483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.871625][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.879776][ T7832] chnl_net:caif_netlink_parms(): no params data found [ 115.914171][ T7829] chnl_net:caif_netlink_parms(): no params data found [ 115.941705][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.950388][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.963870][ T7834] chnl_net:caif_netlink_parms(): no params data found [ 115.975643][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.985653][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.994564][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.002184][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.010567][ T7832] device bridge_slave_0 entered promiscuous mode [ 116.018210][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.025523][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.033518][ T7832] device bridge_slave_1 entered promiscuous mode [ 116.062380][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.100587][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.115896][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.123243][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.131347][ T7834] device bridge_slave_0 entered promiscuous mode [ 116.139633][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.151954][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.159222][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.166797][ T7829] device bridge_slave_0 entered promiscuous mode [ 116.174759][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.181935][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.189975][ T7829] device bridge_slave_1 entered promiscuous mode [ 116.207028][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.219723][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.226781][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.234749][ T7834] device bridge_slave_1 entered promiscuous mode [ 116.257022][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.269539][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.289216][ T7829] team0: Port device team_slave_0 added [ 116.296048][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.318523][ T7834] team0: Port device team_slave_0 added [ 116.328087][ T7834] team0: Port device team_slave_1 added [ 116.335873][ T7829] team0: Port device team_slave_1 added [ 116.345066][ T7832] team0: Port device team_slave_0 added [ 116.352352][ T7832] team0: Port device team_slave_1 added [ 116.400066][ T7832] device hsr_slave_0 entered promiscuous mode [ 116.437678][ T7832] device hsr_slave_1 entered promiscuous mode [ 116.497415][ T7832] debugfs: Directory 'hsr0' with parent '/' already present! [ 116.548779][ T7834] device hsr_slave_0 entered promiscuous mode [ 116.607566][ T7834] device hsr_slave_1 entered promiscuous mode [ 116.667306][ T7834] debugfs: Directory 'hsr0' with parent '/' already present! [ 116.710394][ T7829] device hsr_slave_0 entered promiscuous mode [ 116.777794][ T7829] device hsr_slave_1 entered promiscuous mode [ 116.837533][ T7829] debugfs: Directory 'hsr0' with parent '/' already present! [ 116.846733][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.860383][ T7822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.912932][ T7825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.936178][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.944857][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.958639][ T7822] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.984193][ T7825] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.996803][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.012254][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.020353][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.029531][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.038181][ T7831] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.045228][ T7831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.059150][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.119626][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.129893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.139183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.148648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.155932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.164923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.173809][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.182256][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.189349][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.196838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.205474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.214057][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.222480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.229548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.237225][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.245718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.254250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.262712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.271307][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.280132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.288833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.297127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.305698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.314581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.322729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.330689][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.359159][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.369918][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.379074][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.387738][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.397610][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 15:38:14 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) [ 117.416275][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.428786][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.444835][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.454756][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.470339][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.486364][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.509517][ T7825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.521682][ T7825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.536344][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.545465][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.553632][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.563119][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.571729][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.580044][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.587747][ T3009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.599740][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.676467][ T7825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.838675][ T7822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.849815][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.866783][ T7832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 15:38:15 executing program 0: [ 117.882563][ T7832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 15:38:15 executing program 0: [ 117.945638][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.961527][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.984693][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state 15:38:15 executing program 0: [ 117.991838][ T7836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.012035][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.026693][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.039085][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.046215][ T7836] bridge0: port 2(bridge_slave_1) entered forwarding state 15:38:15 executing program 0: [ 118.061434][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.070383][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.079994][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.089156][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.098027][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 15:38:15 executing program 0: [ 118.117765][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.126045][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.133147][ T7836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.141692][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.150672][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.159372][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state 15:38:15 executing program 0: [ 118.166430][ T7836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.183969][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.192703][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.201894][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.211201][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.220190][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.237920][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.249640][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.262623][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.270600][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.286439][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.295704][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.304293][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.312606][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.321166][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.329619][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.337930][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.347494][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.355287][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.362974][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.371900][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.380301][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.402365][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.416771][ T7829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.438587][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.453848][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.462867][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.469978][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.480583][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.489174][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.497565][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.504599][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.512157][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.520540][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.529217][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.573964][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.599309][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.634663][ T7834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.645244][ T7834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 15:38:16 executing program 0: [ 118.704423][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.722628][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.743130][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.776009][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.793404][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.811704][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.820695][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.829117][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.837718][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.846044][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.853964][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.876374][ T7834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.157172][ C0] hrtimer: interrupt took 31809 ns 15:38:16 executing program 2: 15:38:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='dummy0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 15:38:17 executing program 1: 15:38:17 executing program 0: 15:38:17 executing program 4: 15:38:17 executing program 5: 15:38:17 executing program 2: 15:38:17 executing program 5: 15:38:17 executing program 0: 15:38:17 executing program 2: 15:38:17 executing program 4: 15:38:17 executing program 1: 15:38:17 executing program 4: 15:38:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b1, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9206ac3d78578125082f4fcc477cb57f5650731dfaf12aa77ad43cb41f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)}, 0x0) close(r0) 15:38:17 executing program 0: 15:38:17 executing program 2: 15:38:17 executing program 1: 15:38:17 executing program 5: 15:38:17 executing program 4: 15:38:17 executing program 2: r0 = socket$inet6(0xa, 0x400000000005, 0x0) r1 = dup2(r0, r0) close(r1) fsmount(r1, 0x0, 0x0) 15:38:17 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) dup3(r0, r1, 0x0) 15:38:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x20004000) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @broadcast}, 'vxcan1\x00'}) 15:38:17 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0xfff9) fallocate(r0, 0x3, 0x0, 0x8000) fallocate(r0, 0x0, 0x0, 0xfff9) 15:38:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r3, 0xe87a52239f974ee5, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 15:38:17 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x16b6, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 120.388227][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 120.388235][ T26] audit: type=1800 audit(1568993897.877:31): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16540 res=0 15:38:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000180)="cefaad1b00dc000000dc", 0xffffffffffffff78}], 0x8840, 0x0) 15:38:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), 0x4) 15:38:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000400)="11dca5055e0bcfe47bf070") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:38:17 executing program 4: seccomp(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007fc00000}]}) 15:38:17 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x16b6, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:38:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) syz_open_dev$midi(0x0, 0x0, 0x0) syz_open_dev$midi(0x0, 0x638, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 120.518357][ T7992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:38:18 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount$9p_unix(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='./file0\x00', &(0x7f0000000a00)='9p\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='trans=unix', @ANYBLOB=',dont_appraise,defcontext=']) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) unlink(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) [ 120.774940][ T8006] 9pnet: p9_fd_create_unix (8006): problem connecting socket: ./file0: -111 [ 120.844583][ T26] audit: type=1800 audit(1568993898.327:32): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16523 res=0 [ 120.866107][ T8012] 9pnet: p9_fd_create_unix (8012): problem connecting socket: ./file0: -111 [ 120.891586][ T7999] BFS-fs: bfs_fill_super(): Impossible last inode number 873 > 513 on loop3 15:38:18 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) dup3(r0, r1, 0x0) 15:38:18 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x16b6, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:38:18 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, 0x0}}], 0x42f, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) pwritev(r0, &(0x7f0000001400), 0x31f, 0x0) 15:38:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) syz_open_dev$midi(0x0, 0x0, 0x0) syz_open_dev$midi(0x0, 0x638, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:38:18 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) 15:38:18 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ppoll(&(0x7f0000000000)=[{r1, 0x425}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) 15:38:18 executing program 2: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x21000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) dup3(r3, r1, 0x0) 15:38:18 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) setxattr$security_selinux(0x0, 0x0, &(0x7f0000000080)='system_u:object_r:netcontrol_device_t:s0\x00', 0x0, 0x6) 15:38:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}]}, 0x140}}, 0x0) 15:38:18 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x11, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:19 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000580)='./file0\x00', &(0x7f0000000680)='./file0\x00', &(0x7f0000000a00)='9p\x00', 0x0, 0x0) getrusage(0xffffffffffffffff, 0x0) [ 121.673943][ T8065] 9pnet_virtio: no channels available for device ./file0 [ 121.722995][ T8069] 9pnet_virtio: no channels available for device ./file0 15:38:19 executing program 0: 15:38:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0xca) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, [], @bt={0x0, 0x4, 0x6, 0x10000, 0x0, 0x4, 0x10}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000080)="e3", 0xffffffffffffff30, 0x4044050, 0x0, 0x105) 15:38:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:19 executing program 4: syz_emit_ethernet(0x66, &(0x7f00000001c0)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0x63], @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @gre}}}}, 0x0) [ 121.995987][ T8075] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:38:19 executing program 5: 15:38:19 executing program 0: 15:38:19 executing program 4: 15:38:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:19 executing program 1: 15:38:19 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x11, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:19 executing program 4: 15:38:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:19 executing program 1: 15:38:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:19 executing program 5: 15:38:20 executing program 4: 15:38:20 executing program 1: 15:38:20 executing program 5: 15:38:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:20 executing program 4: 15:38:20 executing program 1: 15:38:20 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x11, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:20 executing program 0: 15:38:20 executing program 5: 15:38:20 executing program 4: 15:38:20 executing program 1: 15:38:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:20 executing program 4: 15:38:20 executing program 0: 15:38:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:20 executing program 1: 15:38:20 executing program 5: 15:38:20 executing program 1: 15:38:21 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ftruncate(r1, 0x2007fff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x11, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:21 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:21 executing program 0: 15:38:21 executing program 4: 15:38:21 executing program 5: 15:38:21 executing program 1: 15:38:21 executing program 5: 15:38:21 executing program 4: 15:38:21 executing program 0: 15:38:21 executing program 1: 15:38:21 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:21 executing program 1: 15:38:22 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:22 executing program 5: 15:38:22 executing program 4: 15:38:22 executing program 0: 15:38:22 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:22 executing program 1: 15:38:22 executing program 1: r0 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaaaa080045000028000000fc0000060000000000000023bb0e00907800000000000000000000bbd538617b40"], 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}], 0x1, 0x0, 0x0) 15:38:22 executing program 4: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) seccomp(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000003a40)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000003a40)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) setuid(0x0) setuid(0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 15:38:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xb7e, 0x0, [{}, {0x0, 0x7fffffff}]}}) 15:38:22 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)={{r1, r2/1000+10000}, {0x0, 0x2710}}) open(0x0, 0x226240, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX]) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x545d2654, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000480)="b13c3d758f14b6e1cd48a0495ec94b0f667b353cbc735ad041a6ddf9553ac60af161f719e5bb40008f3456c81831968c922cab7d0f92ad960fcf7624c36f487d647020a73d5f71edf5216b5cd71468562443bf98d1ca52ad9e9e9ae6684675b3d6dbc765f76aa0f2da11dfdbda487ac010b8402ea283488b4ffdd435d8008af4d5ce15ea12999686c3eae5655f6d981659cec0e4efd333562caed05bbb1fec5ead5e5fa97ee4f5f153dc01eddea44053cb62577d1bcb7f368d45d5a491f0", 0xbe) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="bcef637615f704c4f00400000000"], 0xe) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self\x00', 0x40000, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000340)={0x0, 0x4, 0x5, 0x30c4}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x4c, 0x2, 0x0, 0x80}) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 124.872368][ T26] audit: type=1326 audit(1568993902.357:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c84a code=0x0 15:38:22 executing program 3: listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) [ 124.980302][ T8203] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 15:38:22 executing program 3: listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) [ 125.677245][ T26] audit: type=1326 audit(1568993903.157:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c84a code=0x0 [ 125.801714][ T26] audit: type=1804 audit(1568993903.287:35): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir741633019/syzkaller.Amh29q/17/file0/file0" dev="sda1" ino=16566 res=1 15:38:23 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:23 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)={{r1, r2/1000+10000}, {0x0, 0x2710}}) open(0x0, 0x226240, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd', @ANYRESHEX]) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x545d2654, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000480)="b13c3d758f14b6e1cd48a0495ec94b0f667b353cbc735ad041a6ddf9553ac60af161f719e5bb40008f3456c81831968c922cab7d0f92ad960fcf7624c36f487d647020a73d5f71edf5216b5cd71468562443bf98d1ca52ad9e9e9ae6684675b3d6dbc765f76aa0f2da11dfdbda487ac010b8402ea283488b4ffdd435d8008af4d5ce15ea12999686c3eae5655f6d981659cec0e4efd333562caed05bbb1fec5ead5e5fa97ee4f5f153dc01eddea44053cb62577d1bcb7f368d45d5a491f0", 0xbe) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="bcef637615f704c4f00400000000"], 0xe) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self\x00', 0x40000, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x30c4}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x4c, 0x0, 0x0, 0x80}) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) 15:38:23 executing program 0: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:23 executing program 3: listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:23 executing program 4: 15:38:23 executing program 5: 15:38:23 executing program 5: 15:38:23 executing program 4: 15:38:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:23 executing program 5: 15:38:23 executing program 0: 15:38:23 executing program 4: 15:38:23 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 126.972508][ T26] audit: type=1804 audit(1568993904.457:36): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir695093346/syzkaller.jfRlIr/22/file0/file0" dev="sda1" ino=16582 res=1 15:38:24 executing program 1: 15:38:24 executing program 5: 15:38:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:24 executing program 0: 15:38:24 executing program 4: 15:38:24 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:24 executing program 0: 15:38:24 executing program 5: 15:38:24 executing program 4: 15:38:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:24 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:24 executing program 4: 15:38:24 executing program 1: 15:38:24 executing program 0: 15:38:24 executing program 5: 15:38:24 executing program 4: 15:38:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:24 executing program 1: 15:38:24 executing program 0: 15:38:24 executing program 5: 15:38:25 executing program 4: 15:38:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:25 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:25 executing program 1: 15:38:25 executing program 5: 15:38:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)=@acquire={0x128, 0x17, 0x209, 0x0, 0x0, {{@in=@dev}, @in6=@local, {@in6, @in6=@remote}, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, 0x128}}, 0x0) 15:38:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000001240)='net/ip_tables_targets\x00') syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') read$eventfd(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:38:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) 15:38:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) 15:38:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:25 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:25 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:26 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:26 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:26 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:26 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, 0x0, 0x0, 0x0) 15:38:26 executing program 4: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r4, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) write$nbd(r4, &(0x7f0000000040)={0x67446698, 0x1, 0x2, 0x4, 0x1, "ab4aeb3ea2e051c14ac5e59acf4496e5bff213a1dfa34e87ab770a6b33265171b2742b527b480d225a92f42473444d784399705003f1a6474a30fe90b4da9bfaac64ac313975afa4f9e2c3f71a365e4a2d0e483f9f4cdcbeddf3f8a58d4cf2097f6af494192ec635f091c55ee86d465b"}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x22, 0x0, &(0x7f0000000180)) 15:38:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x100, 0x1a, 0xf, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 15:38:26 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, 0x0, 0x0, 0x0) 15:38:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x74, 0x0, &(0x7f0000000080)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x42580, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x92d, 0xfffffffffffffff8, 0x2, 0x0, 0x0, [{r2, 0x0, 0x8}, {r3, 0x0, 0x4}]}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x80000001, 0x5, 0xffff, 0x20, 0x3, 0x401, 0x1}, 0xc) 15:38:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) sendto$netrom(r0, &(0x7f00000000c0)="016af67f7ca2", 0x6, 0x40400d4, &(0x7f0000000340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x7, 0xa1d4f2c006b75196) semop(r2, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x6b) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000180)=""/193) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r4, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x23d, &(0x7f00000002c0)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b400c000300053582c137153e370900018004081700d1bd", 0x2e}], 0x10000000000000c8, 0x0, 0xfe28}, 0x4044840) 15:38:27 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, 0x0, 0x0, 0x0) 15:38:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0xfffffffffffffffe) 15:38:27 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x10000, 0x0, 0x52b, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c00), 0x91) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x7fffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x90440, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'gre0\x00', 0x700}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='{nodev+em0ppp0trustedbdeveth0\x00') write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x10000000d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 130.350600][ T8416] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 15:38:28 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x0) 15:38:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000000b40)=@nfc={0x27, 0x1, 0x0, 0x9}, 0xfffffffffffffff4, &(0x7f00000002c0)=[{&(0x7f0000000000)='a', 0x1}], 0x1}, 0x80) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x3f) 15:38:28 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x0) 15:38:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x242281, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='/dev/kvm\x00', &(0x7f00000000c0)='./file0\x00', r2) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000140)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) 15:38:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x0) 15:38:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x6000, 0x0, 0x8, 0x8, 0xffffffffffffef01}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89ed, 0x0) 15:38:28 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 15:38:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), 0x2) 15:38:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x1000014e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000140)={0x81, 0x1f, 0xe617}) recvmmsg(r1, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1}}], 0x3f, 0x14303, 0x0) socket$inet6(0xa, 0x1, 0x100000000) [ 131.385484][ T8461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:38:29 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 15:38:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x11, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x342, 0x1800, 0x6000000], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x74, 0x0, &(0x7f0000000080)) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x0) 15:38:29 executing program 5: r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) read(r0, &(0x7f0000000000)=""/100, 0x64) r1 = dup(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) renameat2(r2, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r3, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) pidfd_send_signal(r3, 0xc, &(0x7f0000000080)={0x15, 0x8}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r4, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) accept$ax25(r4, 0x0, &(0x7f0000000140)) 15:38:29 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000001e4c00006ba158a30367"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e23}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 15:38:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 15:38:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f00000002c0)="035fc483ed69672a5c441154c477abce792a4def798e2fbb7027588d5d94fe3c60eebbf1aa6a17d100cad4c5885658970e2903a553778b9ff54b3ef362ed2f844638c44e91993e05cde0a97d2d922428127279c41cc0b5d4fb975c20a8e6219ce053428f6d6b109b6f87ccc8e0d612bee558e1ef1709c27b1d759fcccf1ee3dd8b0524f9d759ef251ddde130f42f852c39dbfdb9bb815da618511f75fc507cd85e02aedbda7dbe0def65bac7f1f1f6d6b7cb3ba48758089670ff4deec9e72a1ec736aa0404c1e24b3675a4", 0xcb) write$P9_RLERRORu(r1, &(0x7f0000000140)={0x17, 0x7, 0x1, {{0xa, '/dev/vbi#\x00'}, 0x2}}, 0x17) unshare(0x24000400) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSTI(r1, 0x5412, 0xb77e) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={r3, @in={{0x2, 0x0, @loopback}}}, &(0x7f0000000280)=0x100) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r4, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000003c0)={0xfffffffffffffff9, 0x0, 0x2}) 15:38:29 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) [ 132.079396][ T8496] FAULT_INJECTION: forcing a failure. [ 132.079396][ T8496] name failslab, interval 1, probability 0, space 0, times 1 [ 132.233859][ T8496] CPU: 0 PID: 8496 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 132.241357][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.251424][ T8496] Call Trace: [ 132.254722][ T8496] dump_stack+0x1d8/0x2f8 [ 132.259067][ T8496] should_fail+0x555/0x770 [ 132.263488][ T8496] __should_failslab+0x11a/0x160 [ 132.268448][ T8496] should_failslab+0x9/0x20 [ 132.272953][ T8496] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 132.278701][ T8496] ? __kmalloc_node+0x3c/0x60 [ 132.283648][ T8496] __kmalloc_node+0x3c/0x60 [ 132.288151][ T8496] kvmalloc_node+0xcc/0x130 [ 132.292653][ T8496] seq_read+0x223/0xd70 [ 132.296810][ T8496] ? fsnotify+0x1318/0x13d0 [ 132.301326][ T8496] ? seq_open+0x180/0x180 [ 132.305661][ T8496] proc_reg_read+0x1e2/0x2d0 [ 132.310260][ T8496] do_iter_read+0x4b1/0x5b0 [ 132.314772][ T8496] do_preadv+0x178/0x290 [ 132.319019][ T8496] ? check_preemption_disabled+0xb7/0x2a0 [ 132.324775][ T8496] ? prepare_exit_to_usermode+0x1f7/0x580 [ 132.330498][ T8496] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 132.336248][ T8496] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 132.341708][ T8496] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 132.347428][ T8496] __x64_sys_preadv+0x9e/0xb0 [ 132.352105][ T8496] do_syscall_64+0xf7/0x1c0 [ 132.356608][ T8496] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 132.362497][ T8496] RIP: 0033:0x459a09 [ 132.366389][ T8496] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 132.387469][ T8496] RSP: 002b:00007f454c710c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 132.395880][ T8496] RAX: ffffffffffffffda RBX: 00007f454c710c90 RCX: 0000000000459a09 [ 132.403836][ T8496] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 132.411922][ T8496] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 132.419870][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f454c7116d4 [ 132.427834][ T8496] R13: 00000000004c6d09 R14: 00000000004dc098 R15: 0000000000000005 15:38:30 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70a000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000000000815d6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r0 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@can, &(0x7f0000000040)=0x80, 0x180000) sendmsg$nfc_llcp(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x27, 0x1, 0x2, 0x6, 0x0, 0x5, "4ef00de2eb17894667cb3122efbca9f7be0499b934dac8550981be04e8e5cdfac453fc6412e3d3c6e20e68b065cb7292ab258a207bd13277f2142bf5937998", 0x11}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000380)="960040091a80a953f6ade690f7a7c07f2f52c68a37ca2499ba87220c8416d3e5224ea24489fb5bf675530f7dce85bfe364bb21be02b683eddb5effa88ee8da549d3fb993bebe7d6254ece1b5e3692ef7c68875b6bfadebc95056a448ca40143ebf2651da14d220f01085942f8b04474e2e2f544175f8573dc4c72198a05772c620921a9a9d9136ee4c1971dfb4f25006de", 0x91}], 0x1, &(0x7f0000000440)={0xc8, 0x6, 0x9, "484f29e9f7fdb8485691bd67fd987f9c6c88e097b2b0abd9891990a1c9d0577e1bde0ac2b2369cd1085e9734d8195486fb57f19e5be6a5b0b4dfa6bb61a891cf90b984f5d4800cf6840d50b24b7ef38265e99e425b91326c29f8f3bc181b9e0885bcbf2be9f5fd28c8906e14066722a16a486ac3ce4682c41b688da2cae56bc4a565679614f3802f42f3e8693702df89f68c05110135090a81a210f5a9b9b0252f2b35857746ded2cbfd1876c5654ef1a55a42"}, 0xc8}, 0x20000010) 15:38:30 executing program 4: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r2, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r3, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x600200) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x5) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r6, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000040)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x40, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x74, 0x0, &(0x7f0000000080)) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r8, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r8, 0xc040564b, &(0x7f00000000c0)={0x7, 0x0, 0x2014, 0x10000, 0x8, {0x20, 0x9}, 0xbc11a04bf36c8cc2}) 15:38:30 executing program 3 (fault-call:3 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0) 15:38:30 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 132.759106][ T8511] FAULT_INJECTION: forcing a failure. [ 132.759106][ T8511] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 132.772596][ T8511] CPU: 1 PID: 8511 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 132.780056][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.790112][ T8511] Call Trace: [ 132.793406][ T8511] dump_stack+0x1d8/0x2f8 [ 132.797761][ T8511] should_fail+0x555/0x770 [ 132.802186][ T8511] should_fail_alloc_page+0x55/0x60 [ 132.807391][ T8511] prepare_alloc_pages+0x283/0x470 [ 132.812594][ T8511] __alloc_pages_nodemask+0xb2/0x5d0 [ 132.817986][ T8511] kmem_getpages+0x56/0xa20 [ 132.822507][ T8511] cache_grow_begin+0x7e/0x2c0 [ 132.827265][ T8511] cache_alloc_refill+0x311/0x3f0 [ 132.832287][ T8511] ? check_preemption_disabled+0xb7/0x2a0 [ 132.838017][ T8511] kmem_cache_alloc_node_trace+0x2a3/0x2d0 [ 132.843818][ T8511] ? __kmalloc_node+0x3c/0x60 [ 132.848498][ T8511] __kmalloc_node+0x3c/0x60 [ 132.852999][ T8511] kvmalloc_node+0xcc/0x130 [ 132.857500][ T8511] seq_read+0x223/0xd70 [ 132.861666][ T8511] ? fsnotify+0x1318/0x13d0 [ 132.866175][ T8511] ? seq_open+0x180/0x180 [ 132.870528][ T8511] proc_reg_read+0x1e2/0x2d0 [ 132.875123][ T8511] do_iter_read+0x4b1/0x5b0 [ 132.879635][ T8511] do_preadv+0x178/0x290 [ 132.884002][ T8511] ? check_preemption_disabled+0xb7/0x2a0 [ 132.889741][ T8511] ? prepare_exit_to_usermode+0x1f7/0x580 [ 132.895547][ T8511] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 132.901275][ T8511] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 132.906742][ T8511] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 132.912467][ T8511] __x64_sys_preadv+0x9e/0xb0 [ 132.919973][ T8511] do_syscall_64+0xf7/0x1c0 [ 132.924492][ T8511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 132.930365][ T8511] RIP: 0033:0x459a09 [ 132.934236][ T8511] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 132.953820][ T8511] RSP: 002b:00007f454c710c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 132.962206][ T8511] RAX: ffffffffffffffda RBX: 00007f454c710c90 RCX: 0000000000459a09 [ 132.970339][ T8511] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 132.978290][ T8511] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 132.986243][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f454c7116d4 [ 132.994201][ T8511] R13: 00000000004c6d09 R14: 00000000004dc098 R15: 0000000000000005 [ 133.072800][ T8493] ================================================================== [ 133.080900][ T8493] BUG: KASAN: use-after-free in __lock_acquire+0x96/0x1be0 [ 133.088095][ T8493] Read of size 8 at addr ffff8880a3e1f6e0 by task syz-executor.0/8493 [ 133.096235][ T8493] [ 133.098564][ T8493] CPU: 1 PID: 8493 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 133.106006][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.116140][ T8493] Call Trace: [ 133.119429][ T8493] dump_stack+0x1d8/0x2f8 [ 133.123751][ T8493] print_address_description+0x75/0x5b0 [ 133.129296][ T8493] ? vprintk_default+0x28/0x30 [ 133.134049][ T8493] ? vprintk_func+0x158/0x170 [ 133.138747][ T8493] ? printk+0x62/0x8d [ 133.142724][ T8493] __kasan_report+0x14b/0x1c0 [ 133.147395][ T8493] ? __lock_acquire+0x96/0x1be0 [ 133.152234][ T8493] kasan_report+0x26/0x50 [ 133.156642][ T8493] __asan_report_load8_noabort+0x14/0x20 [ 133.162265][ T8493] __lock_acquire+0x96/0x1be0 [ 133.166935][ T8493] ? __kasan_check_write+0x14/0x20 [ 133.172036][ T8493] ? kvm_arch_vcpu_load+0x5f9/0x8f0 [ 133.177226][ T8493] ? kvm_sched_in+0x76/0xb0 [ 133.181735][ T8493] ? finish_task_switch+0x2fc/0x550 [ 133.187013][ T8493] ? trace_lock_acquire+0x159/0x1d0 [ 133.192222][ T8493] lock_acquire+0x158/0x250 [ 133.196717][ T8493] ? shmem_fault+0x548/0x690 [ 133.201651][ T8493] _raw_spin_lock+0x2d/0x40 [ 133.206156][ T8493] ? shmem_fault+0x548/0x690 [ 133.210772][ T8493] shmem_fault+0x548/0x690 [ 133.215359][ T8493] ? shmem_get_policy+0xc0/0xc0 [ 133.220207][ T8493] __do_fault+0x144/0x3d0 [ 133.224534][ T8493] handle_mm_fault+0x430c/0x6010 [ 133.229473][ T8493] do_user_addr_fault+0x589/0xaf0 [ 133.234498][ T8493] __do_page_fault+0xd3/0x1f0 [ 133.239169][ T8493] do_page_fault+0x99/0xb0 [ 133.243584][ T8493] page_fault+0x39/0x40 [ 133.247735][ T8493] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 133.254145][ T8493] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 133.273747][ T8493] RSP: 0018:ffff88806043f660 EFLAGS: 00010203 [ 133.279806][ T8493] RAX: ffffffff81b3c6c5 RBX: ffff88805f051c50 RCX: 0000000000000001 [ 133.287775][ T8493] RDX: 0000000000000007 RSI: 0000000020000303 RDI: ffff88805f051c50 [ 133.295745][ T8493] RBP: ffff88806043f6a0 R08: ffffffff81b3c6ad R09: 000000000000000f [ 133.303781][ T8493] R10: 0000000000001c10 R11: ffff8880a5df3380 R12: ffff8880604c01a0 [ 133.311814][ T8493] R13: 0000000020000303 R14: 000000000000000f R15: 0000000020000000 [ 133.319797][ T8493] ? __check_object_size+0x2fd/0x410 [ 133.325082][ T8493] ? __check_object_size+0x315/0x410 [ 133.330380][ T8493] ? __kvm_read_guest_page+0x146/0x190 [ 133.335843][ T8493] kvm_vcpu_read_guest_page+0x40/0x50 [ 133.341213][ T8493] kvm_fetch_guest_virt+0x14d/0x1a0 [ 133.346404][ T8493] ? emulator_write_std+0x200/0x200 [ 133.351629][ T8493] __do_insn_fetch_bytes+0x248/0x650 [ 133.357008][ T8493] x86_decode_insn+0x24f/0x5030 [ 133.362027][ T8493] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 133.367364][ T8493] ? retint_kernel+0x2b/0x2b [ 133.371961][ T8493] ? init_decode_cache+0x65/0x70 [ 133.376913][ T8493] ? init_emulate_ctxt+0x336/0x400 [ 133.382808][ T8493] x86_emulate_instruction+0x2c1/0x2eb0 [ 133.388442][ T8493] kvm_mmu_page_fault+0x2e9/0xeb0 [ 133.393727][ T8493] ? rcu_read_lock_sched_held+0x10b/0x170 [ 133.399452][ T8493] ? trace_kvm_page_fault+0x28b/0x2d0 [ 133.404839][ T8493] handle_ept_violation+0x1bd/0x200 [ 133.410030][ T8493] ? handle_desc+0xa0/0xa0 [ 133.414440][ T8493] vmx_handle_exit+0x3c7/0xe40 [ 133.419198][ T8493] vcpu_enter_guest+0x4040/0x5590 [ 133.424223][ T8493] ? kvm_check_async_pf_completion+0x35b/0x370 [ 133.430513][ T8493] vcpu_run+0x393/0xd40 [ 133.434671][ T8493] kvm_arch_vcpu_ioctl_run+0x636/0x900 [ 133.440139][ T8493] kvm_vcpu_ioctl+0x6cf/0xaf0 [ 133.444814][ T8493] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 133.450281][ T8493] ? check_preemption_disabled+0xa9/0x2a0 [ 133.455997][ T8493] ? kvm_vm_release+0x50/0x50 [ 133.460674][ T8493] do_vfs_ioctl+0x744/0x1730 [ 133.465268][ T8493] ? tomoyo_path_number_perm+0x53e/0x640 [ 133.471247][ T8493] ? security_file_ioctl+0x70/0xd0 [ 133.476614][ T8493] ? security_file_ioctl+0xa1/0xd0 [ 133.481729][ T8493] __x64_sys_ioctl+0xe3/0x120 [ 133.486403][ T8493] do_syscall_64+0xf7/0x1c0 [ 133.490903][ T8493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 133.496800][ T8493] RIP: 0033:0x459a09 [ 133.500695][ T8493] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 133.520323][ T8493] RSP: 002b:00007ff3e98c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.528732][ T8493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 133.536789][ T8493] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 133.544763][ T8493] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 133.552836][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3e98c96d4 [ 133.560823][ T8493] R13: 00000000004c2da0 R14: 00000000004d65c0 R15: 00000000ffffffff [ 133.568792][ T8493] [ 133.571115][ T8493] Allocated by task 8493: [ 133.575463][ T8493] __kasan_kmalloc+0x11c/0x1b0 [ 133.580226][ T8493] kasan_slab_alloc+0xf/0x20 [ 133.584857][ T8493] kmem_cache_alloc+0x1f5/0x2e0 [ 133.589807][ T8493] shmem_alloc_inode+0x1b/0x40 [ 133.594559][ T8493] new_inode_pseudo+0x68/0x240 [ 133.599310][ T8493] new_inode+0x28/0x1c0 [ 133.603455][ T8493] shmem_get_inode+0x11b/0x700 [ 133.608238][ T8493] __shmem_file_setup+0x129/0x280 [ 133.613261][ T8493] shmem_zero_setup+0xaf/0x3e0 [ 133.618015][ T8493] mmap_region+0x123c/0x1cb0 [ 133.622593][ T8493] do_mmap+0xaba/0x1110 [ 133.626739][ T8493] vm_mmap_pgoff+0x13d/0x1d0 [ 133.631320][ T8493] ksys_mmap_pgoff+0x104/0x560 [ 133.636074][ T8493] __x64_sys_mmap+0x103/0x120 [ 133.640742][ T8493] do_syscall_64+0xf7/0x1c0 [ 133.645236][ T8493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 133.651117][ T8493] [ 133.653433][ T8493] Freed by task 8510: [ 133.657408][ T8493] __kasan_slab_free+0x12a/0x1e0 [ 133.662334][ T8493] kasan_slab_free+0xe/0x10 [ 133.666827][ T8493] kmem_cache_free+0x81/0xf0 [ 133.671412][ T8493] shmem_free_in_core_inode+0x91/0xc0 [ 133.676771][ T8493] i_callback+0x4b/0x70 [ 133.680918][ T8493] rcu_core+0x843/0x1050 [ 133.685143][ T8493] rcu_core_si+0x9/0x10 [ 133.689324][ T8493] __do_softirq+0x333/0x7c4 [ 133.693818][ T8493] [ 133.696134][ T8493] The buggy address belongs to the object at ffff8880a3e1f538 [ 133.696134][ T8493] which belongs to the cache shmem_inode_cache of size 1208 [ 133.710787][ T8493] The buggy address is located 424 bytes inside of [ 133.710787][ T8493] 1208-byte region [ffff8880a3e1f538, ffff8880a3e1f9f0) [ 133.724165][ T8493] The buggy address belongs to the page: [ 133.729808][ T8493] page:ffffea00028f87c0 refcount:1 mapcount:0 mapping:ffff8880aa590380 index:0xffff8880a3e1fffd [ 133.740221][ T8493] flags: 0x1fffc0000000200(slab) [ 133.745150][ T8493] raw: 01fffc0000000200 ffffea0002a4c788 ffffea000290c5c8 ffff8880aa590380 [ 133.753727][ T8493] raw: ffff8880a3e1fffd ffff8880a3e1f000 0000000100000003 0000000000000000 [ 133.762297][ T8493] page dumped because: kasan: bad access detected [ 133.768698][ T8493] [ 133.771018][ T8493] Memory state around the buggy address: [ 133.776661][ T8493] ffff8880a3e1f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.785146][ T8493] ffff8880a3e1f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.785490][ T3891] kobject: 'loop2' (00000000c5aeaa87): kobject_uevent_env [ 133.793187][ T8493] >ffff8880a3e1f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.793191][ T8493] ^ [ 133.793196][ T8493] ffff8880a3e1f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 15:38:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x94000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0) 15:38:31 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:31 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) socket$inet6(0xa, 0x80001, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:38:31 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x74, 0x0, &(0x7f0000000080)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') readv(r3, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x102a}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x7, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @alu={0x34307a4275605e0d, 0x1ff, 0x0, 0xa, 0x2, 0x30, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map={0x18, 0x5, 0x1, 0x0, r3}], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 133.793201][ T8493] ffff8880a3e1f780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.793203][ T8493] ================================================================== [ 133.793206][ T8493] Disabling lock debugging due to kernel taint [ 133.793210][ T8493] Kernel panic - not syncing: panic_on_warn set ... [ 133.793222][ T8493] CPU: 1 PID: 8493 Comm: syz-executor.0 Tainted: G B 5.3.0+ #0 [ 133.793226][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.793234][ T8493] Call Trace: [ 133.813457][ T3891] kobject: 'loop2' (00000000c5aeaa87): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 133.815562][ T8493] dump_stack+0x1d8/0x2f8 [ 133.815580][ T8493] panic+0x25c/0x799 [ 133.892926][ T8493] ? trace_hardirqs_off+0x1a/0x80 [ 133.897949][ T8493] __kasan_report+0x1bb/0x1c0 [ 133.902622][ T8493] ? __lock_acquire+0x96/0x1be0 [ 133.907465][ T8493] kasan_report+0x26/0x50 [ 133.911789][ T8493] __asan_report_load8_noabort+0x14/0x20 [ 133.917428][ T8493] __lock_acquire+0x96/0x1be0 [ 133.922103][ T8493] ? __kasan_check_write+0x14/0x20 [ 133.927377][ T8493] ? kvm_arch_vcpu_load+0x5f9/0x8f0 [ 133.932576][ T8493] ? kvm_sched_in+0x76/0xb0 [ 133.937376][ T8493] ? finish_task_switch+0x2fc/0x550 [ 133.942575][ T8493] ? trace_lock_acquire+0x159/0x1d0 [ 133.947775][ T8493] lock_acquire+0x158/0x250 [ 133.952288][ T8493] ? shmem_fault+0x548/0x690 [ 133.956865][ T8493] _raw_spin_lock+0x2d/0x40 [ 133.961397][ T8493] ? shmem_fault+0x548/0x690 [ 133.965971][ T8493] shmem_fault+0x548/0x690 [ 133.970378][ T8493] ? shmem_get_policy+0xc0/0xc0 [ 133.975321][ T8493] __do_fault+0x144/0x3d0 [ 133.979639][ T8493] handle_mm_fault+0x430c/0x6010 [ 133.984579][ T8493] do_user_addr_fault+0x589/0xaf0 [ 133.989604][ T8493] __do_page_fault+0xd3/0x1f0 [ 133.994281][ T8493] do_page_fault+0x99/0xb0 [ 133.998686][ T8493] page_fault+0x39/0x40 [ 134.002829][ T8493] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 134.009488][ T8493] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 134.029079][ T8493] RSP: 0018:ffff88806043f660 EFLAGS: 00010203 [ 134.035129][ T8493] RAX: ffffffff81b3c6c5 RBX: ffff88805f051c50 RCX: 0000000000000001 [ 134.043084][ T8493] RDX: 0000000000000007 RSI: 0000000020000303 RDI: ffff88805f051c50 [ 134.051040][ T8493] RBP: ffff88806043f6a0 R08: ffffffff81b3c6ad R09: 000000000000000f [ 134.059005][ T8493] R10: 0000000000001c10 R11: ffff8880a5df3380 R12: ffff8880604c01a0 [ 134.067061][ T8493] R13: 0000000020000303 R14: 000000000000000f R15: 0000000020000000 [ 134.075030][ T8493] ? __check_object_size+0x2fd/0x410 [ 134.080294][ T8493] ? __check_object_size+0x315/0x410 [ 134.085566][ T8493] ? __kvm_read_guest_page+0x146/0x190 [ 134.091021][ T8493] kvm_vcpu_read_guest_page+0x40/0x50 [ 134.096387][ T8493] kvm_fetch_guest_virt+0x14d/0x1a0 [ 134.101565][ T8493] ? emulator_write_std+0x200/0x200 [ 134.106742][ T8493] __do_insn_fetch_bytes+0x248/0x650 [ 134.112009][ T8493] x86_decode_insn+0x24f/0x5030 [ 134.116891][ T8493] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 134.122166][ T8493] ? retint_kernel+0x2b/0x2b [ 134.126763][ T8493] ? init_decode_cache+0x65/0x70 [ 134.131702][ T8493] ? init_emulate_ctxt+0x336/0x400 [ 134.136798][ T8493] x86_emulate_instruction+0x2c1/0x2eb0 [ 134.142329][ T8493] kvm_mmu_page_fault+0x2e9/0xeb0 [ 134.147340][ T8493] ? rcu_read_lock_sched_held+0x10b/0x170 [ 134.153044][ T8493] ? trace_kvm_page_fault+0x28b/0x2d0 [ 134.158481][ T8493] handle_ept_violation+0x1bd/0x200 [ 134.163660][ T8493] ? handle_desc+0xa0/0xa0 [ 134.168082][ T8493] vmx_handle_exit+0x3c7/0xe40 [ 134.172825][ T8493] vcpu_enter_guest+0x4040/0x5590 [ 134.177833][ T8493] ? kvm_check_async_pf_completion+0x35b/0x370 [ 134.183968][ T8493] vcpu_run+0x393/0xd40 [ 134.188106][ T8493] kvm_arch_vcpu_ioctl_run+0x636/0x900 [ 134.193551][ T8493] kvm_vcpu_ioctl+0x6cf/0xaf0 [ 134.198213][ T8493] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 134.203658][ T8493] ? check_preemption_disabled+0xa9/0x2a0 [ 134.209539][ T8493] ? kvm_vm_release+0x50/0x50 [ 134.214196][ T8493] do_vfs_ioctl+0x744/0x1730 [ 134.218768][ T8493] ? tomoyo_path_number_perm+0x53e/0x640 [ 134.224385][ T8493] ? security_file_ioctl+0x70/0xd0 [ 134.229475][ T8493] ? security_file_ioctl+0xa1/0xd0 [ 134.234582][ T8493] __x64_sys_ioctl+0xe3/0x120 [ 134.239253][ T8493] do_syscall_64+0xf7/0x1c0 [ 134.243738][ T8493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 134.249608][ T8493] RIP: 0033:0x459a09 [ 134.253489][ T8493] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 134.273082][ T8493] RSP: 002b:00007ff3e98c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.281475][ T8493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 134.289782][ T8493] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 134.297735][ T8493] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 134.305698][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3e98c96d4 [ 134.313653][ T8493] R13: 00000000004c2da0 R14: 00000000004d65c0 R15: 00000000ffffffff [ 134.323726][ T8493] Kernel Offset: disabled [ 134.328317][ T8493] Rebooting in 86400 seconds..