[ 36.500095][ T26] audit: type=1800 audit(1551182323.206:28): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.466584][ T26] audit: type=1800 audit(1551182324.256:29): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.487184][ T26] audit: type=1800 audit(1551182324.256:30): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. 2019/02/26 11:58:55 fuzzer started 2019/02/26 11:58:59 dialing manager at 10.128.0.26:37629 2019/02/26 11:58:59 syscalls: 1 2019/02/26 11:58:59 code coverage: enabled 2019/02/26 11:58:59 comparison tracing: enabled 2019/02/26 11:58:59 extra coverage: extra coverage is not supported by the kernel 2019/02/26 11:58:59 setuid sandbox: enabled 2019/02/26 11:58:59 namespace sandbox: enabled 2019/02/26 11:58:59 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/26 11:58:59 fault injection: enabled 2019/02/26 11:58:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/26 11:58:59 net packet injection: enabled 2019/02/26 11:58:59 net device setup: enabled 12:01:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) syzkaller login: [ 176.742681][ T7784] IPVS: ftp: loaded support on port[0] = 21 12:01:03 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 176.842446][ T7784] chnl_net:caif_netlink_parms(): no params data found [ 176.909313][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.924678][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.944699][ T7784] device bridge_slave_0 entered promiscuous mode [ 176.965317][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.972439][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.983438][ T7784] device bridge_slave_1 entered promiscuous mode [ 177.004457][ T7787] IPVS: ftp: loaded support on port[0] = 21 [ 177.020594][ T7784] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.034249][ T7784] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.085964][ T7784] team0: Port device team_slave_0 added [ 177.098039][ T7784] team0: Port device team_slave_1 added 12:01:03 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) [ 177.198100][ T7784] device hsr_slave_0 entered promiscuous mode [ 177.235928][ T7784] device hsr_slave_1 entered promiscuous mode 12:01:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) [ 177.353838][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.361087][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.368716][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.375818][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.431439][ T7787] chnl_net:caif_netlink_parms(): no params data found [ 177.452382][ T7790] IPVS: ftp: loaded support on port[0] = 21 [ 177.523818][ T7784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.558422][ T7793] IPVS: ftp: loaded support on port[0] = 21 12:01:04 executing program 4: clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x11, 0x3, 0x0, 0x0) [ 177.584450][ T7784] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.595038][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.615906][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.634652][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.648899][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 177.673820][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.686652][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.704693][ T7787] device bridge_slave_0 entered promiscuous mode [ 177.717560][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.744646][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.753401][ T7787] device bridge_slave_1 entered promiscuous mode [ 177.776567][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.787331][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.794397][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.828597][ T7797] IPVS: ftp: loaded support on port[0] = 21 12:01:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000d80)=[{{&(0x7f0000000080)=@generic={0x0, "b31c155a81d3ab8badfa66c723f62786fa4bb7c49ba1ab0a8ebd647de0ce69666fe00cf271aa82cf093ce4c0754784e5ebb987866702b52c381e606c43a28164cdc83802cdcc0606adf89716cff827ab9a8cbd296b8c18b52518702a8fecfaadc44c8e395553dd91bb5568a3b68f8b5bfab8e754b6fdfc34bc4544206e19"}, 0x80, 0x0}}], 0x1, 0x0) [ 177.856329][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.872456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.879581][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.893517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.902287][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.928979][ T7784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.942515][ T7784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.971469][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.981231][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.989561][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.998743][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.007137][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.017028][ T7787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.027843][ T7787] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.058753][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.095722][ T7799] IPVS: ftp: loaded support on port[0] = 21 [ 178.120511][ T7787] team0: Port device team_slave_0 added [ 178.129647][ T7787] team0: Port device team_slave_1 added [ 178.143500][ T7790] chnl_net:caif_netlink_parms(): no params data found [ 178.258593][ T7787] device hsr_slave_0 entered promiscuous mode [ 178.314962][ T7787] device hsr_slave_1 entered promiscuous mode [ 178.380479][ T7784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.404427][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.412008][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.419842][ T7790] device bridge_slave_0 entered promiscuous mode [ 178.429457][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.436760][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.444718][ T7790] device bridge_slave_1 entered promiscuous mode [ 178.468568][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 178.496364][ T7790] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.506730][ T7790] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.575706][ T7790] team0: Port device team_slave_0 added [ 178.582639][ T7790] team0: Port device team_slave_1 added [ 178.589070][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.596407][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.609975][ T7793] device bridge_slave_0 entered promiscuous mode [ 178.622039][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.630511][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.638588][ T7793] device bridge_slave_1 entered promiscuous mode 12:01:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x10001) read(r1, &(0x7f00000000c0)=""/11, 0x2) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) [ 178.787409][ T7790] device hsr_slave_0 entered promiscuous mode [ 178.806751][ T7790] device hsr_slave_1 entered promiscuous mode [ 178.867347][ T7793] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.889361][ T7799] chnl_net:caif_netlink_parms(): no params data found [ 178.914093][ T7793] bond0: Enslaving bond_slave_1 as an active interface with an up link 12:01:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @local}, 0x45) r1 = accept4(r0, 0x0, &(0x7f0000000240)=0x155, 0x400000000080000) getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@initdev, @in=@loopback}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xfffffffffffffe5d) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() getgid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getgid() getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getgid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xffffffee, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000280), 0xfffffffffffffedd, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) [ 178.958623][ T7787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.977879][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 179.005465][ T7793] team0: Port device team_slave_0 added [ 179.034323][ T7793] team0: Port device team_slave_1 added [ 179.046410][ T7815] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.084165][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.091718][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.099761][ T7799] device bridge_slave_0 entered promiscuous mode [ 179.112221][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.120646][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.128662][ T7799] device bridge_slave_1 entered promiscuous mode [ 179.149775][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.159830][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.206469][ T7793] device hsr_slave_0 entered promiscuous mode [ 179.255024][ T7793] device hsr_slave_1 entered promiscuous mode 12:01:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0xde1d) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 179.317460][ T7787] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.336993][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.344082][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.356941][ T7797] device bridge_slave_0 entered promiscuous mode [ 179.375597][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.383273][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.393350][ T7797] device bridge_slave_1 entered promiscuous mode [ 179.419437][ T7799] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.428629][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.437708][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.446410][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.453483][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.461366][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.469800][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.478255][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.485451][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.493030][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.501599][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.510032][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.518704][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.527086][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.536780][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.552668][ T7797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.568656][ T7799] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.578198][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.586427][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.596289][ T7797] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.641140][ T7799] team0: Port device team_slave_0 added [ 179.659009][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.666157][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.674312][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.684516][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.692913][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.703125][ T7797] team0: Port device team_slave_0 added [ 179.710370][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.720590][ T7799] team0: Port device team_slave_1 added [ 179.736529][ T7790] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.745813][ T7797] team0: Port device team_slave_1 added [ 179.755904][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.763444][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.787192][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.795968][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.804384][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.811471][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.819456][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.828187][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.836584][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.843627][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.851671][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.916745][ T7799] device hsr_slave_0 entered promiscuous mode [ 179.955006][ T7799] device hsr_slave_1 entered promiscuous mode [ 180.031779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.041475][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.051462][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.060075][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.068665][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.077274][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.088466][ T7787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.137332][ T7797] device hsr_slave_0 entered promiscuous mode 12:01:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) [ 180.186676][ T7797] device hsr_slave_1 entered promiscuous mode [ 180.224808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.232710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.244269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.252964][ T7825] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 180.253211][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.277152][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.323077][ T7790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 12:01:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 180.405584][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.430949][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 12:01:07 executing program 0: r0 = gettid() prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000015) [ 180.470766][ T7799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.496487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.504229][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.551655][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.579656][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.587690][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.612147][ T7799] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.644328][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.659040][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.669050][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.676148][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.684088][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.693066][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.701805][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.708963][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.709371][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.725354][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.733944][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.743040][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 12:01:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 180.775507][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.784733][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.792664][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.801769][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.824708][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.833242][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.849290][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.856541][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.879951][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.891493][ T7793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.903282][ T7793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 12:01:07 executing program 2: prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000380)='./file0\x00', 0x10000000000005b) r3 = socket(0x10, 0x2, 0xc) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f00000013c0)="7f08d0c1a778ddbc4c2eac5cda3239bf042aea96833dc3a9fb6ea316dbc9dcf0393a5209e093b2d91a92451d918e462d2f4f4badd933b88a63bae364adccd23c543b5f297da962c0a211848fbb8eb3a58bfb9f4d99a9d880941e694812aecdadc2971257f26683283fb46721cd26fbfbcb69d5dc221f763930e332f1d4df562df8e7f79496cd174cb2683f560b85ba0f46b04e15970fd223a569381468df8cc719f515e5d4c601c21f0c5cc4", 0xac) tee(r1, r3, 0xfffffffffffff800, 0x3) r4 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') fallocate(r4, 0x10, 0x206, 0x81) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000300)=0x0) sched_getaffinity(r6, 0x8, &(0x7f0000001480)) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000014c0)) r7 = getpid() personality(0x0) epoll_pwait(r5, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1000, &(0x7f00000000c0)={0x8000}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x1000) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000080)) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000002600)=ANY=[@ANYBLOB="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"]) sched_setscheduler(r7, 0x5, &(0x7f0000000200)) write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r3, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) [ 180.931155][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.942948][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.958704][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.971792][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.992378][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.998166][ T7851] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.001892][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.011477][ T7852] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 181.023549][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.030551][ T7851] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.034394][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.045025][ T7854] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 181.050331][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.067934][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.076973][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 12:01:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 181.096591][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.111355][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.122207][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.138479][ T7797] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.173890][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.183084][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.191766][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.200711][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.209179][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.224257][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.253181][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.286310][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.294312][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.307801][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.316914][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.323959][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.331759][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.340403][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.348788][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.355907][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.363510][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.372281][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.382712][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.390607][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.399808][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.438771][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.449246][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.462623][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.493236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.502293][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.510841][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.519722][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.533501][ T7797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.545809][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.555627][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.563832][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.573715][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.621680][ T7797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.631523][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv0 12:01:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x800000000105082) sendfile(r0, r0, 0x0, 0x102000000) 12:01:08 executing program 2: prctl$PR_SET_KEEPCAPS(0x8, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000380)='./file0\x00', 0x10000000000005b) r3 = socket(0x10, 0x2, 0xc) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f00000013c0)="7f08d0c1a778ddbc4c2eac5cda3239bf042aea96833dc3a9fb6ea316dbc9dcf0393a5209e093b2d91a92451d918e462d2f4f4badd933b88a63bae364adccd23c543b5f297da962c0a211848fbb8eb3a58bfb9f4d99a9d880941e694812aecdadc2971257f26683283fb46721cd26fbfbcb69d5dc221f763930e332f1d4df562df8e7f79496cd174cb2683f560b85ba0f46b04e15970fd223a569381468df8cc719f515e5d4c601c21f0c5cc4", 0xac) tee(r1, r3, 0xfffffffffffff800, 0x3) r4 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') fallocate(r4, 0x10, 0x206, 0x81) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000300)=0x0) sched_getaffinity(r6, 0x8, &(0x7f0000001480)) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000014c0)) r7 = getpid() personality(0x0) epoll_pwait(r5, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1000, &(0x7f00000000c0)={0x8000}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x1000) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000080)) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000002600)=ANY=[@ANYBLOB="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"]) sched_setscheduler(r7, 0x5, &(0x7f0000000200)) write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r3, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) 12:01:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(&(0x7f0000000000)=[{r0}], 0x1, 0x1) 12:01:08 executing program 0: r0 = gettid() prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000015) 12:01:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') sendfile(r0, r0, 0x0, 0x5) 12:01:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa010000000400dca21691fd7a344b7fb9feff0000000000000000"], 0x1) [ 181.774832][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 181.780777][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:01:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="3b19004000fbffbbe1663ee2bb875f5cd4b6fc1d00d6043c6cfc1f8688c0c83d34fa28b179bc0d33b18ceafa84fd811e40621614696c68118b"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 181.874666][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 181.880515][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 181.894647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 181.900473][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:01:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') sendfile(r0, r0, 0x0, 0x5) [ 181.935356][ T7879] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 12:01:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(&(0x7f0000000000)=[{r0}], 0x1, 0x1) 12:01:08 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="a9"], 0x1) sendfile(r1, r1, &(0x7f0000000140), 0x7fff) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14}, 0x14) 12:01:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000015) 12:01:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) dup2(r1, r0) dup2(r3, r4) 12:01:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) 12:01:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x5}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 12:01:09 executing program 5: poll(&(0x7f0000000000)=[{}], 0x1, 0x1) 12:01:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fstat(0xffffffffffffffff, &(0x7f0000000180)) 12:01:10 executing program 0: r0 = gettid() prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000015) 12:01:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fstat(0xffffffffffffffff, &(0x7f0000000180)) 12:01:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) 12:01:10 executing program 5: poll(&(0x7f0000000000)=[{}], 0x1, 0x1) 12:01:10 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x26000, 0x0) 12:01:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x7}) 12:01:10 executing program 5: r0 = syz_open_procfs(0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x1) 12:01:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000000)=""/11, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) dup2(r1, r0) dup2(r3, r4) 12:01:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fstat(0xffffffffffffffff, &(0x7f0000000180)) 12:01:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) 12:01:10 executing program 5: r0 = syz_open_procfs(0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x1) 12:01:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12:01:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) dup2(r1, r0) dup2(r3, r4) 12:01:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12:01:12 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(0x0, 0x0, 0x1) 12:01:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fstat(0xffffffffffffffff, 0x0) 12:01:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000000)=""/11, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) dup2(r1, r0) dup2(r3, r4) 12:01:12 executing program 2: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) 12:01:12 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fstat(0xffffffffffffffff, 0x0) 12:01:12 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(&(0x7f0000000000), 0x0, 0x1) 12:01:12 executing program 0: gettid() prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12:01:12 executing program 2: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) 12:01:12 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(&(0x7f0000000000), 0x0, 0x1) 12:01:12 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fstat(0xffffffffffffffff, 0x0) 12:01:13 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(&(0x7f0000000000)=[{}], 0x1, 0x1) 12:01:13 executing program 2: r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x5) 12:01:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000000)=""/11, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) dup2(r1, r0) 12:01:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r0, 0x1000000000015) 12:01:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) dup2(r1, r0) 12:01:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 12:01:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x74000000, 0x5) 12:01:14 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r0, 0x1000000000015) 12:01:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) 12:01:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) dup2(r1, r0) 12:01:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 12:01:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) 12:01:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r0, 0x1000000000015) 12:01:19 executing program 5: 12:01:19 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r2, r3) 12:01:20 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) dup2(r2, r3) 12:01:20 executing program 5: 12:01:23 executing program 0: r0 = gettid() prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000015) 12:01:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 12:01:23 executing program 5: 12:01:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, r0, &(0x7f0000000180), 0x5) 12:01:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(0x0, 0x0, 0xf6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000015) 12:01:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) splice(r0, 0x0, r1, 0x0, 0x1fc, 0x0) 12:01:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, r0, &(0x7f0000000180), 0x5) 12:01:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000000)=""/11, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 12:01:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') sendfile(r0, r0, &(0x7f0000000180)=0x74000000, 0x0) 12:01:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xe7\xff6\x00\xd0\xbb\xbea@Z?\xeeB\xe4\x19\x00\x00\x98\xd2x\xf7\x06\xbcb\x05p\xd3g\xb2\b\xa5\x94{\xdb\x81\xad)\x06Y:F\xd8\xf4\xd2\x16\x97o\x17\xda\xf9\xe6.G\xce\xf2\xcb\xfc\xcc%`\xcd\x96\x9bF\xbb&\xb1@\xadz\xbc\x8e\x8b\xaa\xa8\xfc\xbd\xe4+\xae\x7f\x9b\\0G\xd0\xc1\xae!\xbb\x8d\xd2{\xe1\x179g\xf5\xbf\x04\xeb`\xed\x9e\xb0f\x8b\x02+\xa9+)\xf6h\xc5\xde\x94\x95\xf3\xad\x920xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, 0x0) fstat(r1, &(0x7f0000000180)) [ 199.519827][ T8313] page:ffffea00024c9680 count:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 199.563636][ T8313] flags: 0x1fffc0000000000() [ 199.604918][ T8313] raw: 01fffc0000000000 dead000000000100 0000000000000000 0000000000000000 [ 199.618498][ T8313] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 199.629285][ T8313] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 199.638165][ T8313] ------------[ cut here ]------------ [ 199.643608][ T8313] kernel BUG at include/linux/mm.h:579! [ 199.650066][ T8313] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 199.656122][ T8313] CPU: 1 PID: 8313 Comm: syz-executor.5 Not tainted 5.0.0-rc8-next-20190226 #43 [ 199.665143][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.675198][ T8313] RIP: 0010:generic_pipe_buf_release+0x120/0x160 [ 199.681540][ T8313] Code: bd ff 4c 89 e7 e8 90 43 db ff e8 bb 29 bd ff 5b 41 5c 41 5d 5d c3 e8 af 29 bd ff 48 c7 c6 20 98 75 87 4c 89 e7 e8 c0 db e4 ff <0f> 0b e8 99 29 bd ff 4d 8d 65 ff e9 3d ff ff ff 48 89 df e8 e8 f8 [ 199.701208][ T8313] RSP: 0018:ffff888058d27920 EFLAGS: 00010246 [ 199.707254][ T8313] RAX: 0000000000040000 RBX: ffffea00024c96b4 RCX: ffffc9001087c000 [ 199.715218][ T8313] RDX: 0000000000040000 RSI: ffffffff81982852 RDI: ffffea00024c96b8 [ 199.723180][ T8313] RBP: ffff888058d27938 R08: 000000000000003e R09: ffffed1015d25011 [ 199.731156][ T8313] R10: ffffed1015d25010 R11: ffff8880ae928087 R12: ffffea00024c9680 [ 199.739203][ T8313] R13: 0000000000000000 R14: ffff8880945f4d00 R15: ffff888059ad6040 [ 199.747294][ T8313] FS: 00007ff2a1416700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 199.756197][ T8313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.762755][ T8313] CR2: 0000000000625208 CR3: 000000008754e000 CR4: 00000000001406e0 [ 199.770704][ T8313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.778909][ T8313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.786914][ T8313] Call Trace: [ 199.790190][ T8313] iter_file_splice_write+0x7d1/0xbe0 [ 199.795552][ T8313] ? atime_needs_update+0x5f0/0x5f0 [ 199.800758][ T8313] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 199.806715][ T8313] ? rw_verify_area+0x118/0x360 [ 199.811564][ T8313] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 199.817514][ T8313] direct_splice_actor+0x126/0x1a0 [ 199.822598][ T8313] splice_direct_to_actor+0x369/0x970 [ 199.827942][ T8313] ? generic_pipe_buf_nosteal+0x10/0x10 [ 199.833471][ T8313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.839691][ T8313] ? do_splice_to+0x190/0x190 [ 199.844352][ T8313] ? rw_verify_area+0x118/0x360 [ 199.849176][ T8313] do_splice_direct+0x1da/0x2a0 [ 199.854062][ T8313] ? splice_direct_to_actor+0x970/0x970 [ 199.859708][ T8313] ? rw_verify_area+0x118/0x360 [ 199.864544][ T8313] do_sendfile+0x597/0xd00 [ 199.868937][ T8313] ? do_compat_pwritev64+0x1c0/0x1c0 [ 199.874202][ T8313] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.880429][ T8313] ? put_timespec64+0xda/0x140 [ 199.885171][ T8313] __x64_sys_sendfile64+0x1dd/0x220 [ 199.890364][ T8313] ? __ia32_sys_sendfile+0x230/0x230 [ 199.895622][ T8313] ? do_syscall_64+0x26/0x610 [ 199.900281][ T8313] ? lockdep_hardirqs_on+0x418/0x5d0 [ 199.905538][ T8313] ? trace_hardirqs_on+0x67/0x230 [ 199.910702][ T8313] do_syscall_64+0x103/0x610 [ 199.915274][ T8313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.921135][ T8313] RIP: 0033:0x457e29 [ 199.925016][ T8313] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.944695][ T8313] RSP: 002b:00007ff2a1415c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 199.953084][ T8313] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 199.961037][ T8313] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 199.969166][ T8313] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 199.977118][ T8313] R10: 0000000102000000 R11: 0000000000000246 R12: 00007ff2a14166d4 [ 199.985155][ T8313] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 199.993105][ T8313] Modules linked in: [ 199.997566][ T8313] ---[ end trace 578390142dd0d27c ]--- [ 200.003096][ T8313] RIP: 0010:generic_pipe_buf_release+0x120/0x160 [ 200.009515][ T8313] Code: bd ff 4c 89 e7 e8 90 43 db ff e8 bb 29 bd ff 5b 41 5c 41 5d 5d c3 e8 af 29 bd ff 48 c7 c6 20 98 75 87 4c 89 e7 e8 c0 db e4 ff <0f> 0b e8 99 29 bd ff 4d 8d 65 ff e9 3d ff ff ff 48 89 df e8 e8 f8 [ 200.029397][ T8313] RSP: 0018:ffff888058d27920 EFLAGS: 00010246 [ 200.035606][ T8313] RAX: 0000000000040000 RBX: ffffea00024c96b4 RCX: ffffc9001087c000 [ 200.043582][ T8313] RDX: 0000000000040000 RSI: ffffffff81982852 RDI: ffffea00024c96b8 [ 200.051676][ T8313] RBP: ffff888058d27938 R08: 000000000000003e R09: ffffed1015d25011 [ 200.059677][ T8313] R10: ffffed1015d25010 R11: ffff8880ae928087 R12: ffffea00024c9680 [ 200.067896][ T8313] R13: 0000000000000000 R14: ffff8880945f4d00 R15: ffff888059ad6040 [ 200.075885][ T8313] FS: 00007ff2a1416700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 200.084842][ T8313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.091426][ T8313] CR2: 0000000000625208 CR3: 000000008754e000 CR4: 00000000001406e0 [ 200.099683][ T8313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.107688][ T8313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.115674][ T8313] Kernel panic - not syncing: Fatal exception [ 200.122680][ T8313] Kernel Offset: disabled [ 200.126999][ T8313] Rebooting in 86400 seconds..