Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:9099' (ECDSA) to the list of known hosts. 2020/07/09 02:32:43 fuzzer started 2020/07/09 02:32:43 dialing manager at 10.0.2.10:34471 2020/07/09 02:32:44 syscalls: 3108 2020/07/09 02:32:44 code coverage: enabled 2020/07/09 02:32:44 comparison tracing: enabled 2020/07/09 02:32:44 extra coverage: enabled 2020/07/09 02:32:44 setuid sandbox: enabled 2020/07/09 02:32:44 namespace sandbox: enabled 2020/07/09 02:32:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/09 02:32:44 fault injection: enabled 2020/07/09 02:32:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/09 02:32:44 net packet injection: enabled 2020/07/09 02:32:44 net device setup: enabled 2020/07/09 02:32:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/09 02:32:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/09 02:32:44 USB emulation: enabled 02:33:32 executing program 0: 02:33:33 executing program 1: 02:33:34 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x5452, &(0x7f0000000b00)={'ipvlan0\x00'}) syzkaller login: [ 241.104660][ T8786] IPVS: ftp: loaded support on port[0] = 21 02:33:34 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001200)) [ 241.120555][ T8788] IPVS: ftp: loaded support on port[0] = 21 [ 241.470204][ T8791] IPVS: ftp: loaded support on port[0] = 21 [ 241.680661][ T8792] IPVS: ftp: loaded support on port[0] = 21 [ 241.889428][ T8788] chnl_net:caif_netlink_parms(): no params data found [ 241.975360][ T8786] chnl_net:caif_netlink_parms(): no params data found [ 242.133657][ T8791] chnl_net:caif_netlink_parms(): no params data found [ 242.230247][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.256892][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.280642][ T8788] device bridge_slave_0 entered promiscuous mode [ 242.338525][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.370802][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.410093][ T8788] device bridge_slave_1 entered promiscuous mode [ 242.452380][ T8792] chnl_net:caif_netlink_parms(): no params data found [ 242.568272][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.610902][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.627002][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.643404][ T8791] device bridge_slave_0 entered promiscuous mode [ 242.662811][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.684176][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.697175][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.711749][ T8786] device bridge_slave_0 entered promiscuous mode [ 242.734688][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.757635][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.780412][ T8791] device bridge_slave_1 entered promiscuous mode [ 242.818471][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.841777][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.873851][ T8786] device bridge_slave_1 entered promiscuous mode [ 242.928942][ T8788] team0: Port device team_slave_0 added [ 242.980844][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.000489][ T8788] team0: Port device team_slave_1 added [ 243.043938][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.071737][ T8786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.105262][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.127559][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.152681][ T8792] device bridge_slave_0 entered promiscuous mode [ 243.172525][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.194054][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.260449][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.317973][ T8786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.359515][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.382431][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.408390][ T8792] device bridge_slave_1 entered promiscuous mode [ 243.440228][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.457814][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.529939][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.570829][ T8786] team0: Port device team_slave_0 added [ 243.588735][ T8791] team0: Port device team_slave_0 added [ 243.610485][ T8791] team0: Port device team_slave_1 added [ 243.643898][ T8786] team0: Port device team_slave_1 added [ 243.662678][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.698196][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.715178][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.793727][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.831255][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.847248][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.910568][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.943517][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.971996][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.995303][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.054035][ T8786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.081282][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.095271][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.149267][ T8786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.243834][ T8788] device hsr_slave_0 entered promiscuous mode [ 244.310712][ T8788] device hsr_slave_1 entered promiscuous mode [ 244.474437][ T8786] device hsr_slave_0 entered promiscuous mode [ 244.529923][ T8786] device hsr_slave_1 entered promiscuous mode [ 244.579643][ T8786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.597439][ T8786] Cannot create hsr debugfs directory [ 244.672939][ T8791] device hsr_slave_0 entered promiscuous mode [ 244.729552][ T8791] device hsr_slave_1 entered promiscuous mode [ 244.799374][ T8791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.818672][ T8791] Cannot create hsr debugfs directory [ 244.831477][ T8792] team0: Port device team_slave_0 added [ 244.858005][ T8792] team0: Port device team_slave_1 added [ 244.906607][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.919540][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.969498][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.994833][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.008613][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.059908][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.232347][ T8792] device hsr_slave_0 entered promiscuous mode [ 245.319603][ T8792] device hsr_slave_1 entered promiscuous mode [ 245.389536][ T8792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.416137][ T8792] Cannot create hsr debugfs directory [ 245.794077][ T8786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.916608][ T8786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.072398][ T8786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.126886][ T8786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.242522][ T8788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.386365][ T8788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.516061][ T8788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.652820][ T8788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.826069][ T8791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.941879][ T8791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.027939][ T8791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.174643][ T8791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.255248][ T8792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.342242][ T8792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.423063][ T8792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.577066][ T8792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.852783][ T8786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.923787][ T8788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.970770][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.996985][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.023724][ T8786] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.051764][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.078393][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.094793][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.109282][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.135646][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.156504][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.211333][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.236072][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.274140][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.312489][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.341613][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.370841][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.401990][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.434742][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.463847][ T8788] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.491773][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.527131][ T8786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.566965][ T8786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.622998][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.681519][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.727043][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.760146][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.801755][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.837261][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.874226][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.918142][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.973950][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.023753][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.062737][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.108508][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.146201][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.182676][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.222441][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.268904][ T8791] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.303781][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.321393][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.337955][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.358868][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.377410][ T2844] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.392415][ T2844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.407553][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.424269][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.443485][ T2844] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.456885][ T2844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.471548][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.488247][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.537834][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.570202][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.611864][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.643621][ T2844] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.665391][ T2844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.688291][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.710194][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.734184][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.754468][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.784920][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.811960][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.834325][ T8792] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.866077][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.892290][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.913241][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.931484][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.952204][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.972842][ T2844] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.990350][ T2844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.018083][ T8786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.045226][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.061768][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.080830][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.102101][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.127539][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.148906][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.170438][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.194483][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.220477][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.257355][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.314458][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.340148][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.361956][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.380843][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.404624][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.422201][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.441889][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.467111][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.494390][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.524412][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.559631][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 250.579753][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 250.611339][ T8788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.635779][ T8791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.661392][ T8791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.693783][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.716619][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.742625][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.771976][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.792644][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.840012][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.862807][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.883338][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.916074][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.954336][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.990114][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.023665][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.042735][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.087837][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.118117][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.152211][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.175362][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.199641][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.226136][ T8786] device veth0_vlan entered promiscuous mode [ 251.254409][ T8792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.278068][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.300755][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.316535][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.338364][ T8788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.355666][ T8786] device veth1_vlan entered promiscuous mode [ 251.384699][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.402722][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.426756][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.442037][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.467676][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.489816][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.507195][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.535735][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.554657][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.576337][ T8786] device veth0_macvtap entered promiscuous mode [ 251.603920][ T8786] device veth1_macvtap entered promiscuous mode [ 251.630555][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.656288][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.677347][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.696374][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.716761][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.734206][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.753380][ T8791] device veth0_vlan entered promiscuous mode [ 251.778801][ T8791] device veth1_vlan entered promiscuous mode [ 251.799695][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.822620][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.843435][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.862750][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.885737][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.907643][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.927905][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.950927][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.966152][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.983463][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.004575][ T8788] device veth0_vlan entered promiscuous mode [ 252.044665][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.077651][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.097754][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.121409][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.178260][ T8788] device veth1_vlan entered promiscuous mode [ 252.776179][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.818789][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.841599][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.858355][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.884450][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.904834][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.927665][ T8791] device veth0_macvtap entered promiscuous mode [ 253.141868][ T8792] device veth0_vlan entered promiscuous mode [ 253.293463][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.330132][ T8791] device veth1_macvtap entered promiscuous mode [ 253.634747][ T8792] device veth1_vlan entered promiscuous mode [ 253.721585][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.772295][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.839791][ T8788] device veth0_macvtap entered promiscuous mode [ 253.875537][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 253.906383][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.936131][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.990331][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 254.024628][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.061943][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.218080][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.267620][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.310282][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.363791][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.410622][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.482503][ T8786] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 254.587452][ T8788] device veth1_macvtap entered promiscuous mode [ 254.910898][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.002873][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.268532][ T8792] device veth0_macvtap entered promiscuous mode [ 255.418686][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 255.525009][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:33:49 executing program 0: r0 = memfd_create(&(0x7f0000000300)='x\x80\x00\x02\x00\x00\x00\x00\x00\xdd3\xc6`\x13\xd3e..\xe1~\x9e\x93G\xf6\xd6[\f58\x84\x16\xa3j`\x8a\xd1^\xe2\xff\x80\xb1i\x95\xaf\x98]=\x9f\xd2?L0KR\xfd0\x12\n\x9d\xfdz3#\x83j\\\x98\xea\x995\xe4\xb9\xc0|j\xab\x94\xbf+\xf7U\xc7\xb0R\xc7\xab\xea^\"\xa6z\xef\x8d\xea\xa1\xc9n\xfa\x03\xe4\xaa\xbd=H~;/\xb8\x9c:\xe0C\xcf\azu\xc3v\x11);\xe7!\xe6 \xff\xd2\xa7\xb3\x00\x02\xe4\x03\x145\t\xf0\x83\xa4\x92\x03\xa5\xf35\xdbx_x\xe4T\xc88\xebq\x8c;P[~\xe2\x03\xc1\xdc\b\xd4g\x83\xb6\x85\xb2\x9a#-\x05\xe4\x1c\xc0%\xad\xee\x7f)\x8c\bi\x94\xf8\xce\xd5\xf6\xc7\x98X@\xf4\xb9\xaf\xe5n/3-q\x99/\r\x0f\xc5^\x19\xea\x80\xdd\x05\xa4j\xd0=\xc8\x1cP\xce\x98\x15^\xdf\xee\xb9\xb8R0D9$\xf2\xec\x86\xca\x8c\xa2u\x8e\x1d\x95zn%\x00\x8d \xa7\x1d3\xbe\xdd\x8d\x0e\xc2\x89\x9b\xe8\xa7\xd8\x86%\x81U|\x00|\xa3\x1b\xfa\xee]Bj\'\x96XC\xb0Z\x12d\x8b{K\xf6\xdb\xc5)\xa9\xbe-\xdd^N\xaat@dB\xcf\xcc\x0e\b\xea\xef\x8dc\xc8|u\xa2\x1f22\xa889RA\xdcS\xc9q\x96\x12\xde\x81K\xfa', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0/../file0\x00', 0x20200, 0x0) [ 255.637716][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 255.752395][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.893335][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.002436][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.097592][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.220279][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.302369][ T8792] device veth1_macvtap entered promiscuous mode 02:33:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) sysinfo(&(0x7f0000000080)=""/79) [ 256.478591][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 256.560510][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.630908][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 256.687381][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.755852][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.810744][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.844201][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:33:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) [ 257.255353][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 02:33:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x14d, &(0x7f0000000380)="c4fe910c6786cec96ddb0ebf403ae4b8a9673dc5a45322addee07bee6333893969b73332cb470c94d61f3514dca7712c225da4a455f4c97c94b54721377bf76a8602d7f9cc03be8d53f2becdecbb1acd5e22ae7d0ac031283d2f09f4174aa10009fdb279b242a65760213a2946522afb3b2cdda5adaa04ce1100000046b2d8c3773a4d4723815efdbcafb49d912d92200028642de6a3768e72890ae782020000003c79a22a128f3b70a9585cab560b6be267036bb81069a25d45d926ebcca6e31b10c43f5a2d518dd4b3f7c5b5a4a5aba7e7803b29f2183b856a6eacb0e9842ab2be367f00f0aa3ea0a484acb3343e308f5c139797cb7cb65ffa3bc7e9e5462baa069c4959a04dc46c360c3a766b1efef4c5ff3f65a12131ddfea6ed5836d732cec7e652a358d3cf28844f3592e1996ad37b68d0455aeff4405fce71b9e2edf05450c67e56818c4eb7cafa23b3"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 257.322103][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 02:33:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210200df7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x40) tkill(r2, 0x38) [ 257.395139][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 257.453299][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.492911][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 257.536837][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.587393][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.643977][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.686158][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.820330][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.853980][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.884587][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.932334][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.932419][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 257.932422][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.938489][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.085349][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.118332][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 02:33:51 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000380)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K\x12u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\xf3\\\x14\x89\xe8\xfds\xff\x7f\x00\x00\xf7\xb5\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb3:\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\xf7\xde\x92\x0e\xdc\xd7_\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x1d}]\xce\xc4\x9aUF\x05\xa6\x11~ei\xf2\x95\x86\xa8\xd8\xa8AE\r\xc8\xcbM\xad9\xe0\xec>\x9d \xcb\xab\xe7\x12T\x11\xe6\xd2\x9c}\x18\x1f\xb9_P\xa1a\x98\x87t\x82\xcd\xf7\"\x15\x9da\x8dh\xd4\xaaJ~=\xb2\x17\xb9\xef\x12:\x0f\xe1\x84', 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 02:33:51 executing program 0: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f00000001c0)={0x400003}) [ 258.294297][ T8848] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /syz-fuzzer /syz-executor.1 proc:/self/fd/3' not defined. [ 258.653542][ T8850] modprobe (8850) used greatest stack depth: 22416 bytes left 02:33:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000270fff8f27b", 0x18}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) io_setup(0xd, &(0x7f0000000100)=0x0) io_submit(r2, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x80011c1042, 0x0) ftruncate(r3, 0x2008002) 02:33:52 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c010000100013070000000000000000ac1e0001000000000000000000000000ff01000000000000000000000400000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000d20000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000240017"], 0x15c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 02:33:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000240)='x\x80\x00\x02\x00\x00\x00\x00\x00\xdd3\xc6`\x13\xd3e..\xe1~\x9e\x93G\xf6\xd6[\f5(\x84\x16\xa3j`\x8a\xd1^\xe2\xff\x80\xb1i\x95\xaf\x98]=\x9f\xd2?L0KR\xfd0\x12\n\xa5\xfdz2#\x83j\\\x98\xea\x995\xe4\xb9\xc0|j\xab\x94\xbf+\xf7U\xc7\xb0R\xc7\xab\xea^\"\xa6z\xef\x8d\xea\xa1\xc9n\xfa\x03\xe4\xaa\xbd=H~;/\xb8\x9c:\xe0C\xcf\azu\xc3v\x11);\xe7!\xe6 \xff\xd2\xa7\xb3`\x02\xe4\x03\x145\t', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0/../file0\x00', 0x24040, 0x0) 02:33:52 executing program 0: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x7fff}, 0x14}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) [ 258.837872][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 258.838045][ T40] audit: type=1800 audit(1594262032.245:31): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16580 res=0 02:33:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x210200df7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa01ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r3 = gettid() tkill(r3, 0x39) ptrace(0x4206, r2) wait4(0x0, 0x0, 0x0, 0x0) [ 258.842021][ T8863] FAT-fs (loop2): Directory bread(block 63461) failed [ 258.991889][ T8863] FAT-fs (loop2): Directory bread(block 63462) failed [ 259.019486][ T8863] FAT-fs (loop2): Directory bread(block 63463) failed [ 259.043980][ T8863] FAT-fs (loop2): Directory bread(block 63464) failed [ 259.067279][ T8863] FAT-fs (loop2): Directory bread(block 63465) failed [ 259.092270][ T8863] FAT-fs (loop2): Directory bread(block 63466) failed [ 259.120861][ T8863] FAT-fs (loop2): Directory bread(block 63467) failed [ 259.142539][ T8863] FAT-fs (loop2): Directory bread(block 63468) failed [ 259.166877][ T8863] FAT-fs (loop2): Directory bread(block 63469) failed 02:33:52 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000140)={[0xfffffffffffffffa]}, 0x8) 02:33:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000240)='x\x80\x00\x02\x00\x00\x00\x00\x00\xdd3\xc6`\x13\xd3e..\xe1~\x9e\x93G\xf6\xd6[\f5(\x84\x16\xa3j`\x8a\xd1^\xe2\xff\x80\xb1i\x95\xaf\x98]=\x9f\xd2?L0KR\xfd0\x12\n\xa5\xfdz2#\x83j\\\x98\xea\x995\xe4\xb9\xc0|j\xab\x94\xbf+\xf7U\xc7\xb0R\xc7\xab\xea^\"\xa6z\xef\x8d\xea\xa1\xc9n\xfa\x03\xe4\xaa\xbd=H~;/\xb8\x9c:\xe0C\xcf\azu\xc3v\x11);\xe7!\xe6 \xff\xd2\xa7\xb3`\x02\xe4\x03\x145\t', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0/../file0\x00', 0x24040, 0x0) [ 259.192270][ T8863] FAT-fs (loop2): Directory bread(block 63470) failed 02:33:52 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 259.313473][ T40] audit: type=1800 audit(1594262032.735:32): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16580 res=0 [ 259.710837][ T40] audit: type=1800 audit(1594262033.135:33): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16579 res=0 02:33:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:53 executing program 1: r0 = memfd_create(&(0x7f0000000300)='x\x80\x00\x02\x00\x00\x00\x00\x00\xdd3\xc6`\x13\xd3e..\xe1~\x9e\x93G\xf6\xd6[\f58\x84\x16\xa3j`\x8a\xd1^\xe2\xff\x80\xb1i\x95\xaf\x98]=\x9f\xd2?L0KR\xfd0\x12\n\x9d\xfdz3#\x83j\\\x98\xea\x995\xe4\xb9\xc0|j\xab\x94\xbf+\xf7U\xc7\xb0R\xc7\xab\xea^\"\xa6z\xef\x8d\xea\xa1\xc9n\xfa\x03\xe4\xaa\xbd=H~;/\xb8\x9c:\xe0C\xcf\azu\xc3v\x11);\xe7!\xe6 \xff\xd2\xa7\xb3\x00\x02\xe4\x03\x145\t\xf0\x83\xa4\x92\x03\xa5\xf35\xdbx_x\xe4T\xc88\xebq\x8c;P[~\xe2\x03\xc1\xdc\b\xd4g\x83\xb6\x85\xb2\x9a#-\x05\xe4\x1c\xc0%\xad\xee\x7f)\x8c\bi\x94\xf8\xce\xd5\xf6\xc7\x98X@\xf4\xb9\xaf\xe5n/3-q\x99/\r\x0f\xc5^\x19\xea\x80\xdd\x05\xa4j\xd0=\xc8\x1cP\xce\x98\x15^\xdf\xee\xb9\xb8R0D9$\xf2\xec\x86\xca\x8c\xa2u\x8e\x1d\x95zn%\x00\x8d \xa7\x1d3\xbe\xdd\x8d\x0e\xc2\x89\x9b\xe8\xa7\xd8\x86%\x81U|\x00|\xa3\x1b\xfa\xee]Bj\'\x96XC\xb0Z\x12d\x8b{K\xf6\xdb\xc5)\xa9\xbe-\xdd^N\xaat@dB\xcf\xcc\x0e\b\xea\xef\x8dc\xc8|u\xa2\x1f22\xa889RA\xdcS\xc9q\x96\x12\xde\x81K\xfa', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0/../file0\x00', 0x169003, 0x0) 02:33:53 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:53 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000270fff8f27b", 0x18}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) io_setup(0xd, &(0x7f0000000100)=0x0) io_submit(r2, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x80011c1042, 0x0) ftruncate(r3, 0x2008002) 02:33:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 260.152965][ T8909] FAT-fs (loop2): Directory bread(block 63461) failed 02:33:53 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x6000) [ 260.194037][ T8909] FAT-fs (loop2): Directory bread(block 63462) failed 02:33:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) [ 260.217812][ T8909] FAT-fs (loop2): Directory bread(block 63463) failed [ 260.257352][ T8909] FAT-fs (loop2): Directory bread(block 63464) failed [ 260.309988][ T8909] FAT-fs (loop2): Directory bread(block 63465) failed [ 260.330336][ T8909] FAT-fs (loop2): Directory bread(block 63466) failed [ 260.346732][ T8909] FAT-fs (loop2): Directory bread(block 63467) failed [ 260.365885][ T8909] FAT-fs (loop2): Directory bread(block 63468) failed [ 260.384341][ T8909] FAT-fs (loop2): Directory bread(block 63469) failed [ 260.402124][ T8909] FAT-fs (loop2): Directory bread(block 63470) failed 02:33:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="03"]}) 02:33:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="1dcf7ff06d6c86", 0x7}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf3#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yf\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x05\x00\x00\x00\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\xb3\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c400000019000100000000000000000064010102000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) 02:33:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'bond_slave_1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="01"]}) 02:33:54 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000240)='x\x80\x00\x02\x00\x00\x00\x00\x00\xdd3\xc6`\x13\xd3e..\xe1~\x9e\x93G\xf6\xd6[\f5(\x84\x16\xa3j`\x8a\xd1^\xe2\xff\x80\xb1i\x95\xaf\x98]=\x9f\xd2?L0KR\xfd0\x12\n\xa5\xfdz2#\x83j\\\x98\xea\x995\xe4\xb9\xc0|j\xab\x94\xbf+\xf7U\xc7\xb0R\xc7\xab\xea^\"\xa6z\xef\x8d\xea\xa1\xc9n\xfa\x03\xe4\xaa\xbd=H~;/\xb8\x9c:\xe0C\xcf\azu\xc3v\x11);\xe7!\xe6 \xff\xd2\xa7\xb3`\x02\xe4\x03\x145\t', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 02:33:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:33:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="1dcf7ff06d6c86", 0x7}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf3#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yf\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x05\x00\x00\x00\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\xb3\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c400000019000100000000000000000064010102000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) 02:33:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:54 executing program 3: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 02:33:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:54 executing program 3: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 02:33:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="1dcf7ff06d6c86", 0x7}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf3#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yf\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x05\x00\x00\x00\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\xb3\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c400000019000100000000000000000064010102000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000fffffffffffff801000000000000be06b85b401341e873e6d2bfd04ad4f1d16b35e8cbbc120a607b13a935019668637243ba9650c473d4cb0936f1ef90c856c2ce4a6d075cb084c705768c8edf7e98aec499bd20d29e9a5b334d2f88d20a5d0a0ecdb1072516fc115c77fe648dcd6ce2741abc93bbd902ec4fb41a9ae106f44a53c51eeacd79f974c4bed347c4c4392fae7a9358ded726906bf01b128d3e10d7b5f5befd13adbf509cc0184e04a28a688e2d784529b51ea04e624c38ee80cf979987a1d8d6dadd69d27ed5fd510ae6b9021b49b0e3153595e47f8810acd08fd186cdaef301611fa7020120f50478912c601c8784e3cc965ae1865305f843d56bf5496d9976fc85bb455a555d01d0ba2d6f6a86f12f9aaa9ce1bfa19524f6bc3068c6c23dc5b31b52294faebcd12f06ad518f0ba34f6d8920c27628763cf31657aeef55a43f8cbd687154f74535ecedffe10dc8e81ed427810817aaf59095d0d0ffbae2608403831e29eaf22e22d58fd5700ad110f2f42f657a7407705b1ed08ae92c3dbf35b0aac1f742bd8a47ca062f556612d512332a3dc19c68c7bde5368acda22c9d53aaef961f"], 0xc4}}, 0x0) 02:33:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="1dcf7ff06d6c86", 0x7}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf3#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yf\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x05\x00\x00\x00\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\xb3\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c400000019000100000000000000000064010102000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) 02:33:54 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:54 executing program 3: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 02:33:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:54 executing program 1: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:55 executing program 1: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="1dcf7ff06d6c86", 0x7}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf3#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yf\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x05\x00\x00\x00\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\xb3\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c400000019000100000000000000000064010102000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) 02:33:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="1dcf7ff06d6c86", 0x7}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf3#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yf\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x05\x00\x00\x00\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\xb3\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c400000019000100000000000000000064010102000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:55 executing program 1: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:55 executing program 1: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x6000) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:55 executing program 1: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) 02:33:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="1dcf7ff06d6c86", 0x7}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000400)='\x05\x00\x9e\x86p\xbe\xf3#\xda0n\x004\x1cVV\x87x\xae4\xe0\x87Yf\xf8\x12\x14\xcd|l\xbe(n\x87(P\xbbr\rI5\xe5\xd1M\x92m\x7f{\xee\xfb[\xd7\xe0\xc4\t-\xa5>\xac\x0f\xc0\xc0\xd6\x19\x1bU\x05\x844\xb0\xed\x0e#\tD\xf2\x1c\x05\x00\x00\x00\x8b\xb0\xe2\xb6x\xc3PT\xba=\xa0\xb3\x19\xb5\x95\xa8\xb6\xd0\x13Z\xe4', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c400000019000100000000000000000064010102000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}}, 0x0) 02:33:55 executing program 1: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:55 executing program 1: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:33:55 executing program 0: exit_group(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000001380)=[&(0x7f0000000180)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000002940)="0300ffff0000", 0x6}]) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) 02:33:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) listen(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') read$FUSE(r2, 0x0, 0x9a) close(r0) read$FUSE(r2, &(0x7f0000000100), 0x1000) 02:33:55 executing program 0: socket(0x200000000000011, 0x4000000000080002, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 02:33:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) 02:33:55 executing program 0: r0 = socket(0x400000000000010, 0x802, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e21}}}, 0x4c}}, 0x0) 02:33:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 262.411088][ T9113] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 02:33:56 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c400000019000100000000000000000064010102000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000fffffffffffff801000000000000be06b85b401341e873e6d2bfd04ad4f1d16b35e8cbbc120a607b13a935019668637243ba9650c473d4cb0936f1ef90c856c2ce4a6d075cb084c705768c8edf7e98aec499bd20d29e9a5b334d2f88d20a5d0a0ecdb1072516fc115c77fe648d"], 0xc4}}, 0x0) 02:33:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 02:33:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) 02:33:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) listen(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') read$FUSE(r2, 0x0, 0x9a) close(r0) read$FUSE(r2, &(0x7f0000000100), 0x1000) 02:33:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 02:33:56 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x210200df7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa01ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigreturn() tkill(r0, 0x39) 02:33:56 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\xc4\fp\x9fG\x1e?\xda\x8f/\xb1\xf8\xf1`\rv\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf25\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1x\x82\x8f\x0f\x90\x00\xbe\xb6\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xa4\xa0\xe3w\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) [ 263.069139][ C0] traps: PANIC: double fault, error_code: 0x0 [ 263.069139][ C0] double fault: 0000 [#1] PREEMPT SMP KASAN [ 263.069139][ C0] CPU: 0 PID: 9141 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0 [ 263.069139][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 263.069139][ C0] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 263.069139][ C0] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 263.069139][ C0] RSP: 0018:fffffe0000001fb8 EFLAGS: 00010086 [ 263.069139][ C0] RAX: 00000000f5d57b40 RBX: fffffe0000001fb8 RCX: ffffffff88000e87 [ 263.069139][ C0] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 263.069139][ C0] RBP: fffffe0000002120 R08: 0000000000000000 R09: 0000000000000000 [ 263.069139][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 263.069139][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.069139][ C0] FS: 0000000000000000(0003) GS:ffff88802ce00000(0000) knlGS:0000000000000000 [ 263.069139][ C0] CS: 0010 DS: 0000 ES: 0003 CR0: 0000000080050033 [ 263.069139][ C0] CR2: fffffe0000001fa8 CR3: 0000000063c9f000 CR4: 0000000000340ef0 [ 263.069139][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.069139][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.069139][ C0] Call Trace: [ 263.069139][ C0] [ 263.069139][ C0] error_entry+0xb8/0xc0 [ 263.069139][ C0] RIP: 0010:native_irq_return_iret+0x0/0x2 [ 263.069139][ C0] Code: 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 08 e9 10 00 00 00 90 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 f6 44 24 20 04 75 02 <48> cf 57 0f 01 f8 0f 1f 00 65 48 8b 3c 25 00 90 01 00 48 89 07 48 [ 263.069139][ C0] RSP: 0018:fffffe00000021d8 EFLAGS: 00010046 ORIG_RAX: 0000000000000f00 [ 263.069139][ C0] RAX: 00000000f5d57b40 RBX: 00000000080590d0 RCX: 00000000f5d57b40 [ 263.069139][ C0] RDX: 000000000817af60 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.069139][ C0] RBP: 00000000003d0f00 R08: 0000000000000000 R09: 0000000000000000 [ 263.069139][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 263.069139][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.069139][ C0] ? asm_exc_general_protection+0x8/0x30 [ 263.069139][ C0] RIP: 0f03:0x0 [ 263.069139][ C0] Code: Bad RIP value. [ 263.069139][ C0] RSP: 4f0b:00000000f5d57228 EFLAGS: 00050202 [ 263.069139][ C0] Modules linked in: [ 264.069384][ C0] ---[ end trace 5efeaae67b49c63a ]--- [ 264.069384][ C0] RIP: 0010:fixup_bad_iret+0x24/0x170 [ 264.069384][ C0] Code: eb cb 0f 1f 40 00 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 55 48 89 fd 48 c7 c7 80 85 45 88 53 48 81 ec 40 01 00 00 48 89 e3 <48> c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf 25 6b 89 48 c1 eb 03 48 [ 264.069384][ C0] RSP: 0018:fffffe0000001fb8 EFLAGS: 00010086 [ 264.069384][ C0] RAX: 00000000f5d57b40 RBX: fffffe0000001fb8 RCX: ffffffff88000e87 [ 264.069384][ C0] RDX: 0000000000000000 RSI: ffffffff880009a8 RDI: ffffffff88458580 [ 264.069384][ C0] RBP: fffffe0000002120 R08: 0000000000000000 R09: 0000000000000000 [ 264.069384][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 264.069384][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.069384][ C0] FS: 0000000000000000(0003) GS:ffff88802ce00000(0000) knlGS:0000000000000000 [ 264.069384][ C0] CS: 0010 DS: 0000 ES: 0003 CR0: 0000000080050033 [ 264.069384][ C0] CR2: fffffe0000001fa8 CR3: 0000000063c9f000 CR4: 0000000000340ef0 [ 264.069384][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.069384][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.069384][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 264.069384][ C0] Kernel Offset: disabled