[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.756804][ T25] audit: type=1800 audit(1570699835.618:25): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0 [ 41.791385][ T25] audit: type=1800 audit(1570699835.618:26): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 41.826327][ T25] audit: type=1800 audit(1570699835.628:27): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.198' (ECDSA) to the list of known hosts. 2019/10/10 09:30:46 fuzzer started 2019/10/10 09:30:47 dialing manager at 10.128.0.105:34287 2019/10/10 09:30:47 syscalls: 2523 2019/10/10 09:30:47 code coverage: enabled 2019/10/10 09:30:47 comparison tracing: enabled 2019/10/10 09:30:47 extra coverage: extra coverage is not supported by the kernel 2019/10/10 09:30:47 setuid sandbox: enabled 2019/10/10 09:30:47 namespace sandbox: enabled 2019/10/10 09:30:47 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/10 09:30:47 fault injection: enabled 2019/10/10 09:30:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/10 09:30:47 net packet injection: enabled 2019/10/10 09:30:47 net device setup: enabled 2019/10/10 09:30:47 concurrency sanitizer: enabled 09:30:50 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a61c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b38e47bf070") setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000080)=0xf5, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syzkaller login: [ 56.884512][ T7267] IPVS: ftp: loaded support on port[0] = 21 09:30:50 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x222a6d8102856fd9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32=r1], &(0x7f0000000340)=0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2d) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000025c0)={0x90}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r2, 0x0, 0x40080) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x1, 0x6, 0x5, 0x0, 0x81, 0x5, 0x6, 0x0, 0x5, 0x0, 0x7f, 0x3, 0x0, 0x8, 0x4, 0xff, 0x8, 0x6, 0x3}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x0, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xfff}, 0x8) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) write(0xffffffffffffffff, 0x0, 0x0) getrandom(0x0, 0x0, 0x1) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r0, r6, 0x0, 0x102000002) [ 56.986157][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 57.048059][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.055394][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.064327][ T7267] device bridge_slave_0 entered promiscuous mode [ 57.072145][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.080108][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.088287][ T7267] device bridge_slave_1 entered promiscuous mode [ 57.111559][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.130615][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.175384][ T7267] team0: Port device team_slave_0 added [ 57.190614][ T7267] team0: Port device team_slave_1 added [ 57.243170][ T7270] IPVS: ftp: loaded support on port[0] = 21 09:30:51 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!!,'], 0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000f6c000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="888492f956ce341638cd70283e08a77aeb30fd70717fc4ad58239f8a8fd6855bd5215c1a1f04e45a61971f7a46169d3a90cf0f745662795f7b41bd61637496c6b79e3f5163ce9454886fc8c7c075068dd17dccfea2787f3cad0a485dc73ef54d03508f69c3f276c7ecab0bdc0c5f403e5a8e0e3090848675e58ebc597b7e038c6ad5b44e00dec61adc38c9d5b4a872c019b6ef755527ddbcc2f316c7eba149f5a5a506f4e017f9e31b319eb6ea53e8e59696ae375260f23f2548e4da40d558ba78bd42a6075ae360609acbea29c00597246878b1d3f059d6671d6b27eec1b1"], 0x1a000) [ 57.353416][ T7267] device hsr_slave_0 entered promiscuous mode [ 57.429485][ T7267] device hsr_slave_1 entered promiscuous mode [ 57.476941][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.484073][ T7267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.491502][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.498557][ T7267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.632268][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.659387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.662487][ T7273] IPVS: ftp: loaded support on port[0] = 21 [ 57.672879][ T5] bridge0: port 1(bridge_slave_0) entered disabled state 09:30:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x361) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) [ 57.692044][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.702426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.720529][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.770806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.780477][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.787580][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.812612][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.829963][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.837118][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.910480][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.941909][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.951404][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.961945][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.971167][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.981384][ T7270] chnl_net:caif_netlink_parms(): no params data found [ 57.987354][ T7277] IPVS: ftp: loaded support on port[0] = 21 [ 57.994041][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.058425][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.146899][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.155268][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.165085][ T7270] device bridge_slave_0 entered promiscuous mode 09:30:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 58.189527][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.196667][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.205459][ T7270] device bridge_slave_1 entered promiscuous mode [ 58.223550][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 58.317462][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.364566][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.375878][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 58.406216][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.414277][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.426291][ T7273] device bridge_slave_0 entered promiscuous mode [ 58.468095][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.484506][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.505964][ T7273] device bridge_slave_1 entered promiscuous mode [ 58.523595][ T7270] team0: Port device team_slave_0 added [ 58.564018][ T7270] team0: Port device team_slave_1 added [ 58.573362][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.589390][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.633838][ T7277] device bridge_slave_0 entered promiscuous mode [ 58.674212][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.695663][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.710962][ T7277] device bridge_slave_1 entered promiscuous mode [ 58.719629][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 09:30:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d) [ 58.750251][ T7290] IPVS: ftp: loaded support on port[0] = 21 [ 58.812828][ T7270] device hsr_slave_0 entered promiscuous mode [ 58.882486][ T7270] device hsr_slave_1 entered promiscuous mode [ 58.949166][ T7270] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.958639][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.978141][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.002498][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.027955][ T7292] IPVS: ftp: loaded support on port[0] = 21 [ 59.030477][ T7273] team0: Port device team_slave_0 added [ 59.063938][ T7277] team0: Port device team_slave_0 added [ 59.071775][ T7273] team0: Port device team_slave_1 added [ 59.102362][ T7277] team0: Port device team_slave_1 added 09:30:53 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a61c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b38e47bf070") setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000080)=0xf5, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 59.202283][ T7277] device hsr_slave_0 entered promiscuous mode [ 59.239459][ T7277] device hsr_slave_1 entered promiscuous mode [ 59.289202][ T7277] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.402522][ T7273] device hsr_slave_0 entered promiscuous mode [ 59.439446][ T7273] device hsr_slave_1 entered promiscuous mode [ 59.479153][ T7273] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.520987][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 59.602500][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.611814][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.620500][ T7290] device bridge_slave_0 entered promiscuous mode [ 59.637824][ T7270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.648535][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.656214][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.664127][ T7290] device bridge_slave_1 entered promiscuous mode [ 59.688235][ T7290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.699671][ T7290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.733969][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.744369][ T7290] team0: Port device team_slave_0 added [ 59.750960][ T7292] chnl_net:caif_netlink_parms(): no params data found [ 59.782389][ T7290] team0: Port device team_slave_1 added [ 59.790515][ T7270] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.803482][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.811430][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.819288][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.828339][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.837134][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.844282][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.861902][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.893639][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.901822][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.909768][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.917760][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.926722][ T7300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.935666][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.942829][ T7300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.956164][ T7292] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.963939][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.971994][ T7292] device bridge_slave_0 entered promiscuous mode [ 59.987091][ T7292] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.994468][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.002908][ T7292] device bridge_slave_1 entered promiscuous mode [ 60.013092][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 09:30:53 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a61c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b38e47bf070") setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000080)=0xf5, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 60.082059][ T7290] device hsr_slave_0 entered promiscuous mode [ 60.109773][ T7290] device hsr_slave_1 entered promiscuous mode [ 60.139136][ T7290] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.152067][ T7270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.162839][ T7270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.174567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.183793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.193245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.202318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.211735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.220661][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.229910][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.238723][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.247656][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.254748][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.263268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.272198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.281138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.289931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.304803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.313322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.321747][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.333552][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.346774][ T7270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.363985][ T7292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.374331][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.382699][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.392034][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.401647][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.410292][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.417357][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.430935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.439710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.448050][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.455181][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.463161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.475569][ T7292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.511271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.520261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.529835][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.538869][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.546089][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.554486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.563516][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.572888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.581930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.591355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.600746][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.612692][ T7292] team0: Port device team_slave_0 added [ 60.624368][ T7273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.638450][ T7273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.657660][ T7277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.668543][ T7277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.680830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.690177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.698659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.707615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.716096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.724691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.734035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.742987][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.752319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.761434][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.770803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.779561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.788429][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.797106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.805893][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.814107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.823134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.832409][ T7292] team0: Port device team_slave_1 added 09:30:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a61c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b38e47bf070") setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000080)=0xf5, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 60.913402][ T7292] device hsr_slave_0 entered promiscuous mode [ 60.950250][ C0] hrtimer: interrupt took 35168 ns [ 60.964277][ T7292] device hsr_slave_1 entered promiscuous mode [ 61.019190][ T7292] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.033263][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.057691][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.147071][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.229012][ T7292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.267034][ T7290] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.283935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.298480][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.306787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.315357][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.323445][ T7313] syz-executor.1 (7313) used greatest stack depth: 9032 bytes left [ 61.334137][ T7292] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.369519][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.390716][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.399850][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.407018][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.415671][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 09:30:55 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x222a6d8102856fd9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32=r1], &(0x7f0000000340)=0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2d) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000025c0)={0x90}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r2, 0x0, 0x40080) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x1, 0x6, 0x5, 0x0, 0x81, 0x5, 0x6, 0x0, 0x5, 0x0, 0x7f, 0x3, 0x0, 0x8, 0x4, 0xff, 0x8, 0x6, 0x3}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x0, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xfff}, 0x8) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) write(0xffffffffffffffff, 0x0, 0x0) getrandom(0x0, 0x0, 0x1) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r0, r6, 0x0, 0x102000002) [ 61.438256][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.454875][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.462014][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.471717][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.498602][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.508714][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.530999][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.540511][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 09:30:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x361) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) [ 61.564068][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.580755][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.598429][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.614593][ T7290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.640327][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.660509][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.680182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.704647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.728425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.752387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.785708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.798711][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.805860][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.818575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.827672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.841788][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.849090][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state 09:30:55 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x222a6d8102856fd9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32=r1], &(0x7f0000000340)=0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2d) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000025c0)={0x90}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r2, 0x0, 0x40080) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x1, 0x6, 0x5, 0x0, 0x81, 0x5, 0x6, 0x0, 0x5, 0x0, 0x7f, 0x3, 0x0, 0x8, 0x4, 0xff, 0x8, 0x6, 0x3}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x0, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xfff}, 0x8) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) write(0xffffffffffffffff, 0x0, 0x0) getrandom(0x0, 0x0, 0x1) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r0, r6, 0x0, 0x102000002) 09:30:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x361) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) [ 61.902488][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.937441][ T7290] 8021q: adding VLAN 0 to HW filter on device batadv0 09:30:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x361) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) [ 61.958550][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.030629][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.053298][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.108491][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.148601][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.187999][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.222784][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.303126][ T7292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.356680][ T7292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.414750][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.426203][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.446080][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.465752][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.489848][ T7274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.517227][ T7292] 8021q: adding VLAN 0 to HW filter on device batadv0 09:30:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x361) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 09:30:57 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x222a6d8102856fd9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32=r1], &(0x7f0000000340)=0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x2d) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000025c0)={0x90}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r2, 0x0, 0x40080) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0x1, 0x6, 0x5, 0x0, 0x81, 0x5, 0x6, 0x0, 0x5, 0x0, 0x7f, 0x3, 0x0, 0x8, 0x4, 0xff, 0x8, 0x6, 0x3}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0x0, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xfff}, 0x8) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) write(0xffffffffffffffff, 0x0, 0x0) getrandom(0x0, 0x0, 0x1) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r0, r6, 0x0, 0x102000002) [ 63.195668][ T7398] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.622925][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 63.623007][ T25] audit: type=1804 audit(1570699857.488:31): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir007077798/syzkaller.GO2PqN/0/file0/file0" dev="sda1" ino=16525 res=1 09:30:57 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!!,'], 0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000f6c000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="888492f956ce341638cd70283e08a77aeb30fd70717fc4ad58239f8a8fd6855bd5215c1a1f04e45a61971f7a46169d3a90cf0f745662795f7b41bd61637496c6b79e3f5163ce9454886fc8c7c075068dd17dccfea2787f3cad0a485dc73ef54d03508f69c3f276c7ecab0bdc0c5f403e5a8e0e3090848675e58ebc597b7e038c6ad5b44e00dec61adc38c9d5b4a872c019b6ef755527ddbcc2f316c7eba149f5a5a506f4e017f9e31b319eb6ea53e8e59696ae375260f23f2548e4da40d558ba78bd42a6075ae360609acbea29c00597246878b1d3f059d6671d6b27eec1b1"], 0x1a000) 09:30:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x361) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 09:30:57 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!!,'], 0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000f6c000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="888492f956ce341638cd70283e08a77aeb30fd70717fc4ad58239f8a8fd6855bd5215c1a1f04e45a61971f7a46169d3a90cf0f745662795f7b41bd61637496c6b79e3f5163ce9454886fc8c7c075068dd17dccfea2787f3cad0a485dc73ef54d03508f69c3f276c7ecab0bdc0c5f403e5a8e0e3090848675e58ebc597b7e038c6ad5b44e00dec61adc38c9d5b4a872c019b6ef755527ddbcc2f316c7eba149f5a5a506f4e017f9e31b319eb6ea53e8e59696ae375260f23f2548e4da40d558ba78bd42a6075ae360609acbea29c00597246878b1d3f059d6671d6b27eec1b1"], 0x1a000) 09:30:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d) 09:30:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d) 09:30:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:30:58 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x361) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 09:30:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d) 09:30:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d) 09:30:58 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!!,'], 0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000f6c000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="888492f956ce341638cd70283e08a77aeb30fd70717fc4ad58239f8a8fd6855bd5215c1a1f04e45a61971f7a46169d3a90cf0f745662795f7b41bd61637496c6b79e3f5163ce9454886fc8c7c075068dd17dccfea2787f3cad0a485dc73ef54d03508f69c3f276c7ecab0bdc0c5f403e5a8e0e3090848675e58ebc597b7e038c6ad5b44e00dec61adc38c9d5b4a872c019b6ef755527ddbcc2f316c7eba149f5a5a506f4e017f9e31b319eb6ea53e8e59696ae375260f23f2548e4da40d558ba78bd42a6075ae360609acbea29c00597246878b1d3f059d6671d6b27eec1b1"], 0x1a000) 09:30:58 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!!,'], 0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000f6c000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="888492f956ce341638cd70283e08a77aeb30fd70717fc4ad58239f8a8fd6855bd5215c1a1f04e45a61971f7a46169d3a90cf0f745662795f7b41bd61637496c6b79e3f5163ce9454886fc8c7c075068dd17dccfea2787f3cad0a485dc73ef54d03508f69c3f276c7ecab0bdc0c5f403e5a8e0e3090848675e58ebc597b7e038c6ad5b44e00dec61adc38c9d5b4a872c019b6ef755527ddbcc2f316c7eba149f5a5a506f4e017f9e31b319eb6ea53e8e59696ae375260f23f2548e4da40d558ba78bd42a6075ae360609acbea29c00597246878b1d3f059d6671d6b27eec1b1"], 0x1a000) 09:30:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:30:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d) 09:30:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d) 09:30:59 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!!,'], 0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000f6c000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="888492f956ce341638cd70283e08a77aeb30fd70717fc4ad58239f8a8fd6855bd5215c1a1f04e45a61971f7a46169d3a90cf0f745662795f7b41bd61637496c6b79e3f5163ce9454886fc8c7c075068dd17dccfea2787f3cad0a485dc73ef54d03508f69c3f276c7ecab0bdc0c5f403e5a8e0e3090848675e58ebc597b7e038c6ad5b44e00dec61adc38c9d5b4a872c019b6ef755527ddbcc2f316c7eba149f5a5a506f4e017f9e31b319eb6ea53e8e59696ae375260f23f2548e4da40d558ba78bd42a6075ae360609acbea29c00597246878b1d3f059d6671d6b27eec1b1"], 0x1a000) 09:30:59 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x60) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#!!,'], 0x4) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x4) shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bfd000/0x400000)=nil) shmat(0x0, &(0x7f0000f6c000/0x4000)=nil, 0x5000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="888492f956ce341638cd70283e08a77aeb30fd70717fc4ad58239f8a8fd6855bd5215c1a1f04e45a61971f7a46169d3a90cf0f745662795f7b41bd61637496c6b79e3f5163ce9454886fc8c7c075068dd17dccfea2787f3cad0a485dc73ef54d03508f69c3f276c7ecab0bdc0c5f403e5a8e0e3090848675e58ebc597b7e038c6ad5b44e00dec61adc38c9d5b4a872c019b6ef755527ddbcc2f316c7eba149f5a5a506f4e017f9e31b319eb6ea53e8e59696ae375260f23f2548e4da40d558ba78bd42a6075ae360609acbea29c00597246878b1d3f059d6671d6b27eec1b1"], 0x1a000) 09:30:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:30:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:30:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:31:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:31:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:31:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 09:31:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_procfs(0x0, &(0x7f0000001140)='maps\x00') r5 = socket(0x1e, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e22, @local}}) close(r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x20}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r6, 0x4, 0x3800) perf_event_open(0x0, 0x0, 0x5, r6, 0x2) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 67.685566][ T7513] ================================================================== [ 67.693728][ T7513] BUG: KCSAN: data-race in ext4_es_lookup_extent / ext4_es_lookup_extent [ 67.703956][ T7513] [ 67.706282][ T7513] read to 0xffff88821860b428 of 8 bytes by task 7532 on cpu 0: [ 67.713843][ T7513] ext4_es_lookup_extent+0x3ba/0x510 [ 67.719116][ T7513] ext4_da_get_block_prep+0x159/0xa60 [ 67.724475][ T7513] ext4_block_write_begin+0x33e/0xb90 [ 67.729830][ T7513] ext4_da_write_begin+0x1da/0x7e0 [ 67.734925][ T7513] generic_perform_write+0x136/0x320 [ 67.740199][ T7513] __generic_file_write_iter+0x251/0x380 [ 67.745818][ T7513] ext4_file_write_iter+0x1fc/0xa40 [ 67.751005][ T7513] new_sync_write+0x388/0x4a0 [ 67.755667][ T7513] __vfs_write+0xb1/0xc0 [ 67.759897][ T7513] vfs_write+0x18a/0x390 [ 67.764162][ T7513] ksys_write+0xd5/0x1b0 [ 67.768392][ T7513] __x64_sys_write+0x4c/0x60 [ 67.772972][ T7513] do_syscall_64+0xcf/0x2f0 [ 67.777465][ T7513] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.783335][ T7513] [ 67.785656][ T7513] write to 0xffff88821860b428 of 8 bytes by task 7513 on cpu 1: [ 67.793287][ T7513] ext4_es_lookup_extent+0x3d3/0x510 [ 67.798572][ T7513] ext4_da_get_block_prep+0x159/0xa60 [ 67.803928][ T7513] ext4_block_write_begin+0x33e/0xb90 [ 67.809287][ T7513] ext4_da_write_begin+0x1da/0x7e0 [ 67.814380][ T7513] generic_perform_write+0x136/0x320 [ 67.819649][ T7513] __generic_file_write_iter+0x251/0x380 [ 67.825268][ T7513] ext4_file_write_iter+0x1fc/0xa40 [ 67.830452][ T7513] new_sync_write+0x388/0x4a0 [ 67.835128][ T7513] __vfs_write+0xb1/0xc0 [ 67.839368][ T7513] vfs_write+0x18a/0x390 [ 67.843615][ T7513] ksys_write+0xd5/0x1b0 [ 67.847878][ T7513] __x64_sys_write+0x4c/0x60 [ 67.852459][ T7513] do_syscall_64+0xcf/0x2f0 [ 67.856958][ T7513] [ 67.859268][ T7513] Reported by Kernel Concurrency Sanitizer on: [ 67.865407][ T7513] CPU: 1 PID: 7513 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 67.872841][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.882878][ T7513] ================================================================== [ 67.890920][ T7513] Kernel panic - not syncing: panic_on_warn set ... [ 67.897498][ T7513] CPU: 1 PID: 7513 Comm: syz-executor.4 Not tainted 5.3.0+ #0 [ 67.904933][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.914968][ T7513] Call Trace: [ 67.918249][ T7513] dump_stack+0xf5/0x159 [ 67.922480][ T7513] panic+0x209/0x639 [ 67.926363][ T7513] ? __vfs_write+0xb1/0xc0 [ 67.930785][ T7513] ? vprintk_func+0x8d/0x140 [ 67.935486][ T7513] kcsan_report.cold+0xc/0x1b [ 67.940151][ T7513] __kcsan_setup_watchpoint+0x3ee/0x510 [ 67.945684][ T7513] __tsan_write8+0x32/0x40 [ 67.950093][ T7513] ext4_es_lookup_extent+0x3d3/0x510 [ 67.955371][ T7513] ext4_da_get_block_prep+0x159/0xa60 [ 67.960746][ T7513] ? _raw_spin_unlock+0x4b/0x60 [ 67.965582][ T7513] ? create_empty_buffers+0x20c/0x3e0 [ 67.970943][ T7513] ext4_block_write_begin+0x33e/0xb90 [ 67.976302][ T7513] ? ext4_bmap+0x220/0x220 [ 67.980717][ T7513] ? __tsan_read4+0x2c/0x30 [ 67.985231][ T7513] ext4_da_write_begin+0x1da/0x7e0 [ 67.990336][ T7513] generic_perform_write+0x136/0x320 [ 67.995612][ T7513] __generic_file_write_iter+0x251/0x380 [ 68.001234][ T7513] ext4_file_write_iter+0x1fc/0xa40 [ 68.006424][ T7513] new_sync_write+0x388/0x4a0 [ 68.011115][ T7513] __vfs_write+0xb1/0xc0 [ 68.015350][ T7513] vfs_write+0x18a/0x390 [ 68.019597][ T7513] ksys_write+0xd5/0x1b0 [ 68.023830][ T7513] __x64_sys_write+0x4c/0x60 [ 68.028425][ T7513] do_syscall_64+0xcf/0x2f0 [ 68.032919][ T7513] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 68.038800][ T7513] RIP: 0033:0x459a59 [ 68.042690][ T7513] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 68.062282][ T7513] RSP: 002b:00007f85f5904c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.070681][ T7513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 68.078642][ T7513] RDX: 000000000076656f RSI: 00000000200009c0 RDI: 0000000000000003 [ 68.086597][ T7513] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 68.094554][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f85f59056d4 [ 68.102509][ T7513] R13: 00000000004c9eb5 R14: 00000000004e1ad8 R15: 00000000ffffffff [ 68.111764][ T7513] Kernel Offset: disabled [ 68.116090][ T7513] Rebooting in 86400 seconds..