[ 36.790852][ T26] audit: type=1800 audit(1554701210.982:27): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.813616][ T26] audit: type=1800 audit(1554701210.992:28): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.638934][ T26] audit: type=1800 audit(1554701211.892:29): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. 2019/04/08 05:27:19 fuzzer started 2019/04/08 05:27:22 dialing manager at 10.128.0.26:34543 2019/04/08 05:27:23 syscalls: 2408 2019/04/08 05:27:23 code coverage: enabled 2019/04/08 05:27:23 comparison tracing: enabled 2019/04/08 05:27:23 extra coverage: extra coverage is not supported by the kernel 2019/04/08 05:27:23 setuid sandbox: enabled 2019/04/08 05:27:23 namespace sandbox: enabled 2019/04/08 05:27:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/08 05:27:23 fault injection: enabled 2019/04/08 05:27:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/08 05:27:23 net packet injection: enabled 2019/04/08 05:27:23 net device setup: enabled 05:29:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000000)) syzkaller login: [ 200.472240][ T7817] IPVS: ftp: loaded support on port[0] = 21 [ 200.574952][ T7817] chnl_net:caif_netlink_parms(): no params data found 05:29:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x24, 0x4, 0x1, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000)="c3cad859", 0x0, 0x2}, 0x20) [ 200.624948][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.646375][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.666685][ T7817] device bridge_slave_0 entered promiscuous mode [ 200.687117][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.694275][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.702785][ T7817] device bridge_slave_1 entered promiscuous mode [ 200.750487][ T7817] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.775346][ T7817] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:29:35 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6076605100303afffe00000000000000ffff020000000000000000000000000001860090780014030060c5961e00000000ff010000000000000103000004000001ff020000000000000000000000000001"], 0x0) [ 200.800136][ T7817] team0: Port device team_slave_0 added [ 200.809415][ T7817] team0: Port device team_slave_1 added [ 200.820236][ T7820] IPVS: ftp: loaded support on port[0] = 21 [ 200.918056][ T7817] device hsr_slave_0 entered promiscuous mode [ 200.955750][ T7817] device hsr_slave_1 entered promiscuous mode [ 201.014447][ T7822] IPVS: ftp: loaded support on port[0] = 21 [ 201.033424][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.040807][ T7817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.048702][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.055826][ T7817] bridge0: port 1(bridge_slave_0) entered forwarding state 05:29:35 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) sync() dup3(r0, 0xffffffffffffffff, 0x0) [ 201.225057][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 201.303128][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.326295][ T7826] IPVS: ftp: loaded support on port[0] = 21 [ 201.337330][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.344478][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.355080][ T7820] device bridge_slave_0 entered promiscuous mode [ 201.381475][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.390055][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.398246][ T7820] device bridge_slave_1 entered promiscuous mode 05:29:35 executing program 4: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00\xe4\x83y\x82_\x01+\x02/\x06\xd7\xa4\xc1\x87\x01,\xce\xd3zq\\j\xa3\t\x8a-`\xb6\xea\x1fx\xe1\xb8\x18\x87`[r\xafG]\r\x18\x19G\x9dH\xf7f\xec\x189$,o\xb1\x8c6\xaf]\xaf\xf5\x05\xf5\x97\xaa\xe3)!\x9dz0CN]\xe1w\x9e,3\x9c\xf2\xdb9\x1d\x96>[\xbc\x16') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 201.424638][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.461889][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.479506][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.494247][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.516116][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 201.540997][ T7820] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.594228][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.617181][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.624291][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.645599][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.654064][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.661209][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.673682][ T7820] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:29:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x2, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) [ 201.698608][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.728472][ T7822] chnl_net:caif_netlink_parms(): no params data found [ 201.766139][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.771686][ T7830] IPVS: ftp: loaded support on port[0] = 21 [ 201.774828][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.806044][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.814437][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.823828][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.832693][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.841459][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.872770][ T7817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.885572][ T7817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.894368][ T7820] team0: Port device team_slave_0 added [ 201.901760][ T7820] team0: Port device team_slave_1 added [ 201.907816][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.916398][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.924558][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.960655][ T7832] IPVS: ftp: loaded support on port[0] = 21 [ 202.098052][ T7820] device hsr_slave_0 entered promiscuous mode [ 202.135624][ T7820] device hsr_slave_1 entered promiscuous mode [ 202.190966][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.203246][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.211143][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.220392][ T7822] device bridge_slave_0 entered promiscuous mode [ 202.230241][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.237401][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.245847][ T7822] device bridge_slave_1 entered promiscuous mode [ 202.256433][ T7826] chnl_net:caif_netlink_parms(): no params data found [ 202.294457][ T7822] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.347159][ T7822] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.370286][ T7822] team0: Port device team_slave_0 added [ 202.380341][ T7822] team0: Port device team_slave_1 added [ 202.392130][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.403471][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.422112][ T7826] device bridge_slave_0 entered promiscuous mode [ 202.430721][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.441542][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.449388][ T7826] device bridge_slave_1 entered promiscuous mode 05:29:36 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r0, &(0x7f0000000040)=""/48, 0x30, 0x42, 0x0, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(r1, 0xffff, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchown(r0, r2, r3) getsockopt$sock_cred(r1, 0xffff, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80000, 0x3) close(r6) fdatasync(r0) setsockopt$sock_int(r7, 0xffff, 0x1003, &(0x7f0000000280)=0x2, 0x4) semget$private(0x0, 0x2, 0x40) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') r10 = dup2(r9, r8) recvfrom$inet(r8, &(0x7f0000000380)=""/4096, 0x1000, 0x42, &(0x7f0000001380)={0x2, 0x2}, 0xc) sendmsg$unix(r8, &(0x7f0000001600)={&(0x7f00000013c0)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f00000014c0)=[{&(0x7f0000001400)="b5e19cf76b838f5e8347bd07cffa344888003656d16ad02204fff762128b99010ae3e9c2975bc22e22bdc5dbaea1e8972f559ac3b4ceba96c15a4755d81b39c614833d1dce6a221eaafc8b760b1fb7c10c6db4765d912163a493647bc640bb65f57d30f62c369addc56e5e99222a837aed604998258c337d62334c5efb75cee5ab2671", 0x83}], 0x1, 0x0, 0x0, 0x4}, 0x4) readv(r8, &(0x7f0000001c40)=[{&(0x7f0000001640)=""/7, 0x7}, {&(0x7f0000001680)=""/198, 0xc6}, {&(0x7f0000001780)=""/41, 0x29}, {&(0x7f00000017c0)=""/167, 0xa7}, {&(0x7f0000001880)=""/218, 0xda}, {&(0x7f0000001980)}, {&(0x7f00000019c0)=""/134, 0x86}, {&(0x7f0000001a80)=""/162, 0xa2}, {&(0x7f0000001b40)=""/220, 0xdc}], 0x9) connect$inet6(r0, &(0x7f0000001d00)={0x18, 0x1, 0x8001}, 0xc) r11 = shmget(0x3, 0x1000, 0x84, &(0x7f0000fff000/0x1000)=nil) shmat(r11, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg(r1, &(0x7f0000003000)={&(0x7f0000001d40)=@in6={0x18, 0x1, 0x1fc000000}, 0xc, &(0x7f0000002d80)=[{&(0x7f0000001d80)="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", 0x1000}], 0x1}, 0x8) fchown(r1, r4, r3) setsockopt$sock_timeval(r10, 0xffff, 0x100f, &(0x7f0000003040)={0x7c, 0x8000}, 0x10) fcntl$setstatus(r7, 0x4, 0x40) recvfrom$inet(r10, &(0x7f0000003080)=""/152, 0x98, 0x841, &(0x7f0000003140), 0xc) getsockopt$sock_cred(r6, 0xffff, 0x11, &(0x7f0000003180), &(0x7f00000031c0)=0xc) fcntl$setflags(r5, 0x2, 0x1) write(r9, &(0x7f0000003200)="b916ee832803450a339ad455", 0xc) ftruncate(r7, 0xfff) [ 202.553850][ C0] hrtimer: interrupt took 21463 ns 05:29:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netstat\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e7, 0x0) [ 202.599533][ T7822] device hsr_slave_0 entered promiscuous mode [ 202.635806][ T7822] device hsr_slave_1 entered promiscuous mode [ 202.669361][ T7826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.679976][ T7826] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.689050][ T7830] chnl_net:caif_netlink_parms(): no params data found [ 202.806120][ T7826] team0: Port device team_slave_0 added [ 202.841779][ T7832] chnl_net:caif_netlink_parms(): no params data found [ 202.862473][ T7826] team0: Port device team_slave_1 added 05:29:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x97cb06ebee444840, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x707) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002600)=@x25, 0x80, &(0x7f0000002880)=[{&(0x7f0000002680)=""/71, 0x47}, {&(0x7f0000002700)=""/228, 0xe4}, {&(0x7f0000002800)=""/91, 0x5b}], 0x3, &(0x7f00000028c0)=""/4096, 0x1000}}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003940)=""/201, 0xc9}, {&(0x7f0000003a40)=""/131, 0x83}], 0x2}, 0x8}], 0x3, 0x0, 0x0) [ 202.988268][ T7826] device hsr_slave_0 entered promiscuous mode 05:29:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 203.045725][ T7826] device hsr_slave_1 entered promiscuous mode [ 203.104992][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.114253][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.122523][ T7830] device bridge_slave_0 entered promiscuous mode 05:29:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000a9cff8)) socket$packet(0x11, 0x3, 0x300) ioctl$BLKIOOPT(r1, 0x1279, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 203.166496][ T7822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.173635][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.191189][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.206149][ T7830] device bridge_slave_1 entered promiscuous mode 05:29:37 executing program 0: r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x802102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/5, 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x3a3) tkill(r0, 0x80000000000003d) [ 203.224176][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.233239][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.241100][ T7832] device bridge_slave_0 entered promiscuous mode [ 203.249132][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.256298][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.266919][ T7832] device bridge_slave_1 entered promiscuous mode [ 203.298996][ T7830] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.327947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.338149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.349238][ T7822] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.372551][ T7832] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.383358][ T7830] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.409420][ T7832] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.437967][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.447621][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.456193][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.463339][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.471458][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.480752][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.489204][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.496323][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.504356][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.516352][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.529354][ T7830] team0: Port device team_slave_0 added [ 203.538328][ T7830] team0: Port device team_slave_1 added [ 203.627308][ T7830] device hsr_slave_0 entered promiscuous mode [ 203.665627][ T7830] device hsr_slave_1 entered promiscuous mode [ 203.696789][ T7832] team0: Port device team_slave_0 added [ 203.703986][ T7832] team0: Port device team_slave_1 added [ 203.715810][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.728578][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.749789][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.758941][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.767257][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.782224][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.838486][ T7832] device hsr_slave_0 entered promiscuous mode [ 203.885556][ T7832] device hsr_slave_1 entered promiscuous mode [ 203.935674][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.943500][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.951956][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.977507][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.986050][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.994372][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.001511][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.009489][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.018376][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.027314][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.034358][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.042138][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.050710][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.059267][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.066413][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.073923][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.082548][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.091429][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.099634][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.108130][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.141058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.150668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.159860][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.168640][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.177436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.187189][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.195843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.204326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.212864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.220064][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.259576][ T7822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.271373][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.280390][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.289411][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.297839][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.307008][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.315446][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.323903][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.332557][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.341191][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.349756][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.358118][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.367174][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.374992][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.402352][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.411088][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.419770][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.428087][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.436350][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.444596][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.453143][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.461606][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.470126][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.478599][ T3485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.491567][ T7826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.507949][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.582542][ T7830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.591622][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.608894][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.620973][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.634005][ T7822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.654014][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.670275][ T7830] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.678998][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.689060][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.706678][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.714511][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.761501][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.781094][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.814248][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.821581][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.836710][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.846400][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.854980][ T121] bridge0: port 2(bridge_slave_1) entered blocking state 05:29:39 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1a) unlink(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x10000) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) creat(&(0x7f00000001c0)='./file1\x00', 0x0) [ 204.862200][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state 05:29:39 executing program 1: umount2(0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x80) io_setup(0x10200000000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000500)={0x0, 0x0, 0x80000001}) 05:29:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000006c0)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe52}}], 0x1, 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) close(r1) [ 204.897452][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.917982][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.937284][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.959297][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.966506][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.991781][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 05:29:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x900) [ 205.007868][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.061062][ T7895] sched: DL replenish lagged too much [ 205.075238][ T7895] IPVS: ftp: loaded support on port[0] = 21 [ 205.078875][ T7830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.123626][ T7830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.567800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.582783][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.609788][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.618028][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.645191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.664134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.674751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.689434][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.701381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.714706][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.724664][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.733286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.741853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.750271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.782431][ T7907] IPVS: ftp: loaded support on port[0] = 21 [ 205.808731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.817137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.824792][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.833599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.842073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.850922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.859650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.868231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.876779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.885184][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.893668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.933005][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.953692][ T7832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.973945][ T7830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.014966][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.108292][ T7913] x86/PAT: syz-executor.5:7913 map pfn RAM range req write-combining for [mem 0x5e588000-0x5e58bfff], got write-back [ 206.171066][ T7916] x86/PAT: syz-executor.5:7916 map pfn RAM range req write-combining for [mem 0x5e588000-0x5e58bfff], got write-back 05:29:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r1, 0x2000) 05:29:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 05:29:40 executing program 5: syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x400000000000098, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz0\x00') 05:29:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x0, {0x40, 0x0, 0x8}}, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) [ 206.464984][ T7925] ion_mmap: failure mapping buffer to userspace [ 206.517595][ T7929] ion_mmap: failure mapping buffer to userspace [ 206.531250][ T7931] x86/PAT: syz-executor.4:7931 map pfn RAM range req write-combining for [mem 0x9fa3d000-0x9fa3dfff], got write-back [ 206.592338][ T7933] x86/PAT: syz-executor.4:7933 map pfn RAM range req write-combining for [mem 0x9fa3d000-0x9fa3dfff], got write-back 05:29:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r1, 0x2000) 05:29:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000300)="32cd0ae775d5", 0x6}], 0x1}, 0x0) [ 206.804327][ T7937] x86/PAT: syz-executor.4:7937 map pfn RAM range req write-combining for [mem 0x95710000-0x95710fff], got write-back [ 206.952172][ T7939] check_preemption_disabled: 1 callbacks suppressed [ 206.952196][ T7939] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/7939 [ 206.968891][ T7939] caller is ip6_finish_output+0x335/0xdc0 [ 206.974745][ T7939] CPU: 1 PID: 7939 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 206.983812][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.993896][ T7939] Call Trace: [ 206.997214][ T7939] dump_stack+0x172/0x1f0 [ 207.001564][ T7939] __this_cpu_preempt_check+0x246/0x270 [ 207.007127][ T7939] ip6_finish_output+0x335/0xdc0 [ 207.012100][ T7939] ip6_output+0x235/0x7f0 [ 207.016470][ T7939] ? ip6_finish_output+0xdc0/0xdc0 [ 207.021615][ T7939] ? ip6_fragment+0x3980/0x3980 [ 207.026494][ T7939] ? ip6_autoflowlabel.part.0+0x70/0x70 [ 207.032068][ T7939] ip6_local_out+0xc4/0x1b0 [ 207.036598][ T7939] ip6_send_skb+0xbb/0x350 [ 207.041048][ T7939] ip6_push_pending_frames+0xc8/0xf0 [ 207.046357][ T7939] rawv6_sendmsg+0x299c/0x35e0 [ 207.051148][ T7939] ? rawv6_getsockopt+0x150/0x150 [ 207.056208][ T7939] ? aa_profile_af_perm+0x320/0x320 [ 207.061424][ T7939] ? tomoyo_check_inet_address+0x321/0x700 [ 207.067249][ T7939] ? tomoyo_unix_entry+0x5d0/0x5d0 [ 207.072378][ T7939] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 207.078148][ T7939] ? rw_copy_check_uvector+0x2a6/0x330 [ 207.083645][ T7939] ? ___might_sleep+0x163/0x280 [ 207.088518][ T7939] ? __might_sleep+0x95/0x190 [ 207.093230][ T7939] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 207.098802][ T7939] inet_sendmsg+0x147/0x5e0 [ 207.103332][ T7939] ? rawv6_getsockopt+0x150/0x150 [ 207.108377][ T7939] ? inet_sendmsg+0x147/0x5e0 [ 207.113081][ T7939] ? ipip_gro_receive+0x100/0x100 [ 207.118129][ T7939] sock_sendmsg+0xdd/0x130 [ 207.122564][ T7939] ___sys_sendmsg+0x806/0x930 [ 207.127268][ T7939] ? copy_msghdr_from_user+0x430/0x430 [ 207.132757][ T7939] ? kasan_check_read+0x11/0x20 [ 207.137659][ T7939] ? __fget+0x381/0x550 [ 207.141850][ T7939] ? __fget_light+0x1a9/0x230 [ 207.146566][ T7939] ? __fdget+0x1b/0x20 [ 207.150657][ T7939] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 207.156929][ T7939] __sys_sendmsg+0x105/0x1d0 [ 207.161588][ T7939] ? __ia32_sys_shutdown+0x80/0x80 [ 207.166733][ T7939] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 207.172212][ T7939] ? do_syscall_64+0x26/0x610 [ 207.176923][ T7939] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.183045][ T7939] ? do_syscall_64+0x26/0x610 [ 207.187850][ T7939] __x64_sys_sendmsg+0x78/0xb0 [ 207.192649][ T7939] do_syscall_64+0x103/0x610 [ 207.197265][ T7939] entry_SYSCALL_64_after_hwframe+0x49/0xbe 05:29:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r1, 0x2000) [ 207.203175][ T7939] RIP: 0033:0x4582b9 [ 207.207089][ T7939] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.226743][ T7939] RSP: 002b:00007feeba4bdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.235173][ T7939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004582b9 [ 207.243186][ T7939] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 207.251180][ T7939] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 207.251202][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feeba4be6d4 [ 207.251211][ T7939] R13: 00000000004c58ba R14: 00000000004d9b78 R15: 00000000ffffffff [ 207.375567][ T7943] x86/PAT: syz-executor.4:7943 map pfn RAM range req write-combining for [mem 0x8aa5a000-0x8aa5afff], got write-back 05:29:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r1, 0x2000) [ 207.682629][ T7947] x86/PAT: syz-executor.4:7947 map pfn RAM range req write-combining for [mem 0x8aa5a000-0x8aa5afff], got write-back [ 207.796947][ T7951] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.3/7951 [ 207.806602][ T7951] caller is ip6_finish_output+0x335/0xdc0 [ 207.812347][ T7951] CPU: 0 PID: 7951 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190405 #19 [ 207.821466][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.831520][ T7951] Call Trace: [ 207.834826][ T7951] dump_stack+0x172/0x1f0 [ 207.839177][ T7951] __this_cpu_preempt_check+0x246/0x270 [ 207.844737][ T7951] ip6_finish_output+0x335/0xdc0 [ 207.849702][ T7951] ip6_output+0x235/0x7f0 [ 207.854047][ T7951] ? ip6_finish_output+0xdc0/0xdc0 [ 207.859179][ T7951] ? ip6_fragment+0x3980/0x3980 [ 207.864041][ T7951] ? ip6_autoflowlabel.part.0+0x70/0x70 [ 207.869604][ T7951] ip6_local_out+0xc4/0x1b0 [ 207.869625][ T7951] ip6_send_skb+0xbb/0x350 [ 207.869643][ T7951] ip6_push_pending_frames+0xc8/0xf0 [ 207.869659][ T7951] rawv6_sendmsg+0x299c/0x35e0 [ 207.869681][ T7951] ? rawv6_getsockopt+0x150/0x150 [ 207.869696][ T7951] ? aa_profile_af_perm+0x320/0x320 [ 207.869708][ T7951] ? tomoyo_check_inet_address+0x321/0x700 [ 207.869725][ T7951] ? tomoyo_unix_entry+0x5d0/0x5d0 [ 207.869742][ T7951] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 207.869757][ T7951] ? rw_copy_check_uvector+0x2a6/0x330 [ 207.869782][ T7951] ? ___might_sleep+0x163/0x280 [ 207.869797][ T7951] ? __might_sleep+0x95/0x190 [ 207.869823][ T7951] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 207.869839][ T7951] inet_sendmsg+0x147/0x5e0 [ 207.869852][ T7951] ? rawv6_getsockopt+0x150/0x150 [ 207.869863][ T7951] ? inet_sendmsg+0x147/0x5e0 [ 207.869891][ T7951] ? ipip_gro_receive+0x100/0x100 [ 207.869917][ T7951] sock_sendmsg+0xdd/0x130 [ 207.869936][ T7951] ___sys_sendmsg+0x806/0x930 [ 207.869954][ T7951] ? copy_msghdr_from_user+0x430/0x430 [ 207.869981][ T7951] ? kasan_check_read+0x11/0x20 [ 207.870000][ T7951] ? __fget+0x381/0x550 [ 207.870034][ T7951] ? __fget_light+0x1a9/0x230 [ 207.870050][ T7951] ? __fdget+0x1b/0x20 [ 207.870064][ T7951] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 207.870081][ T7951] __sys_sendmsg+0x105/0x1d0 [ 207.870095][ T7951] ? __ia32_sys_shutdown+0x80/0x80 [ 207.870124][ T7951] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 207.870140][ T7951] ? do_syscall_64+0x26/0x610 [ 207.870156][ T7951] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.870170][ T7951] ? do_syscall_64+0x26/0x610 [ 207.870189][ T7951] __x64_sys_sendmsg+0x78/0xb0 [ 207.870206][ T7951] do_syscall_64+0x103/0x610 [ 207.870223][ T7951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.870234][ T7951] RIP: 0033:0x4582b9 [ 207.870249][ T7951] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.870257][ T7951] RSP: 002b:00007feeba45ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.870272][ T7951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004582b9 [ 207.870280][ T7951] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 207.870289][ T7951] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 207.870297][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feeba45b6d4 [ 207.870305][ T7951] R13: 00000000004c58ba R14: 00000000004d9b78 R15: 00000000ffffffff 05:29:42 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1a) unlink(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x10000) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) creat(&(0x7f00000001c0)='./file1\x00', 0x0) 05:29:44 executing program 1: umount2(0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x80) io_setup(0x10200000000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000500)={0x0, 0x0, 0x80000001}) 05:29:44 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, 0xffffffffffffffff, 0x2000) 05:29:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="020b4f090700000027bd70defddbdf250300080058000000a488e1db25fb5f2068bc210000000000"], 0x28}}, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000010c0)=""/4096) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000001c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10002, 0x7}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x31ac93e, r2}) r3 = request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='syz', 0xfffffffffffffffe) add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000004c0)="ac9fdbbebdf4ee1b37639976339ac3aeca52c5a18235bd6ce4918d9adc825fdf719e94b4b2a4b3d2697f877776c9b63f53c73273a4fd75478d1b8a9b65a4ce44d37227dcce88eb032c7c796c121a70c67db90b772b4b0b1232297597a463372732d7b25fb12a1b40d214428be735188ee697b17694953ffb06e5106055d47a6ce283fef301affad1e09fe12c02", 0x8d, r3) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000600)={'bridge_slave_0\x00', 0x6}) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000300)) faccessat(r1, &(0x7f00000005c0)='./file0\x00', 0x0, 0x400) getsockopt(0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syncfs(r4) pipe2(&(0x7f0000000040), 0x80000) 05:29:44 executing program 3: getgid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1002}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) gettid() lseek(0xffffffffffffffff, 0x0, 0x0) 05:29:44 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) 05:29:44 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:44 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, 0xffffffffffffffff, 0x2000) 05:29:44 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:44 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, 0xffffffffffffffff, 0x2000) 05:29:44 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:44 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r0, 0x2000) 05:29:45 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1a) unlink(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x10000) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) creat(&(0x7f00000001c0)='./file1\x00', 0x0) 05:29:46 executing program 1: umount2(0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x80) io_setup(0x10200000000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000500)={0x0, 0x0, 0x80000001}) 05:29:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="020b4f090700000027bd70defddbdf250300080058000000a488e1db25fb5f2068bc210000000000"], 0x28}}, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000010c0)=""/4096) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000001c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10002, 0x7}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x31ac93e, r2}) r3 = request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='syz', 0xfffffffffffffffe) add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000004c0)="ac9fdbbebdf4ee1b37639976339ac3aeca52c5a18235bd6ce4918d9adc825fdf719e94b4b2a4b3d2697f877776c9b63f53c73273a4fd75478d1b8a9b65a4ce44d37227dcce88eb032c7c796c121a70c67db90b772b4b0b1232297597a463372732d7b25fb12a1b40d214428be735188ee697b17694953ffb06e5106055d47a6ce283fef301affad1e09fe12c02", 0x8d, r3) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000600)={'bridge_slave_0\x00', 0x6}) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000300)) faccessat(r1, &(0x7f00000005c0)='./file0\x00', 0x0, 0x400) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syncfs(r4) pipe2(&(0x7f0000000040), 0x80000) 05:29:46 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:46 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r0, 0x2000) 05:29:46 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='ramfs\x00{C4\xe9\xbf\xa6r\xa7B\xaa5\x00\x04\xa5\b\x00\xa3P\xb0KXhK;CbxoS\x85\x96\xdbT\xce\xd4\xc9h\x99\xf4@o*\x92\xc6\xdd0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r0, 0x2000) [ 212.536527][ T8026] IPVS: ftp: loaded support on port[0] = 21 05:29:46 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl(0xffffffffffffffff, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:46 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x400000000000098, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz0\x00') 05:29:46 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl(0xffffffffffffffff, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:47 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r1, 0x2000) 05:29:47 executing program 5: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl(0xffffffffffffffff, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:48 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1a) unlink(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x10000) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) creat(&(0x7f00000001c0)='./file1\x00', 0x0) 05:29:48 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x100, 0x7a) accept$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="31d13771e4c0b92a7202b7f7f145556e5f5a730092514dada36c474205339d91fb2aa4586c04ce3b5722f5358e", 0x2d, 0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) 05:29:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r1, 0x2000) 05:29:48 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='\x00\x95\xc1\xa3\xbf\xab\x9eP?A3\xd4~\xeb\x1e\xb3\xf9 1\x14\xfdo\a\x8a{\t\xe7\xde_\xb7\xe0\xeea?y\aL\x8f\xe6\xfc\xbao\x02\xd9&\x1c\xa5\x1b\x13\xf9H\xf2\xed\xfb\x1f:\x1a)\xa4\x1fm\xab\xb8\x0f\x9dDE\xa9\xf7\x85S\x03\x8e[\xfd\xd8\x1b\x1d\xcd\x9d\x1eL)\xe2\xfa\n\x12\xf3\x83\x94\xbcb=\v\x9c}3\xf6\xf2\xfc0F$\xa4\v\x82\x93\x84rhf\x1bb\xc9\xed\xff\x9b/ET\xbe\x1b\xb8,\xd5 \xb0j#\xf8\xfa\xfe\xbeU\xee\xf7!/!F\xe2H\x97\xf9zV\xdb37\t=\x96\xabH\xd4\x90\xa1zW\xe3\x02\xb0\xb1\xf8\t\x15\x92\xb0\xf4\xb8V`a\x1cWg\xd5$s\x8fF\x95y\xb4T\xd9\x18N\x95\xa4\xd9\x84{\xfc\x81\vJ\xfbx\x04\xbeL\x12\xaa\xf2\x0fq.X\xb6\x9a\x12\xa8\x86~\xdasIB\xf2<\x9bm\x900\xfa\xf9\x97\xc8/\x0fK\xb1\xd9\xc6\x8e\xae\x01\xbd\x8d{\xfe\xf5\x11\xccL[n=\xb2N\xffJAR/F\v\x9d\xf0\xda\x891\xfd\xdb\xc9\xd3\x86\x8f\xcb\xd6O\xf5q\xcc\xa1\x99\vu\x85\xb3\xd2\xaf\x11\xe1\x9c', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 05:29:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) 05:29:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3) 05:29:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000040)) 05:29:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x7fff, 0x5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x2, 0x0, 0x6012, r1, 0x2000) 05:29:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="020b4f090700000027bd70defddbdf2503000800"], 0x14}}, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000010c0)=""/4096) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000001c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10002, 0x7}) r2 = request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='syz', 0xfffffffffffffffe) add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r2) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000600)={'bridge_slave_0\x00', 0x6}) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000300)) faccessat(r1, &(0x7f00000005c0)='./file0\x00', 0x0, 0x400) getsockopt(0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syncfs(r3) pipe2(&(0x7f0000000040), 0x80000) 05:29:49 executing program 1: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @mcast1, @ipv4, 0x0, 0x0, 0x0, 0x12a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 05:29:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3)