[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.963373][ T26] audit: type=1800 audit(1547401789.131:25): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 42.000789][ T26] audit: type=1800 audit(1547401789.131:26): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.035649][ T26] audit: type=1800 audit(1547401789.131:27): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.76' (ECDSA) to the list of known hosts. 2019/01/13 17:50:00 fuzzer started 2019/01/13 17:50:02 dialing manager at 10.128.0.26:39407 2019/01/13 17:50:02 syscalls: 1 2019/01/13 17:50:02 code coverage: enabled 2019/01/13 17:50:02 comparison tracing: enabled 2019/01/13 17:50:02 setuid sandbox: enabled 2019/01/13 17:50:02 namespace sandbox: enabled 2019/01/13 17:50:02 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/13 17:50:02 fault injection: enabled 2019/01/13 17:50:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/13 17:50:02 net packet injection: enabled 2019/01/13 17:50:02 net device setup: enabled 17:53:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x4, 0x4, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x0, 0x8}, 0xc) syzkaller login: [ 262.966707][ T8040] IPVS: ftp: loaded support on port[0] = 21 17:53:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) dup2(r0, r1) [ 263.126243][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 263.188486][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.197352][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.206027][ T8040] device bridge_slave_0 entered promiscuous mode [ 263.215030][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.232682][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.241322][ T8040] device bridge_slave_1 entered promiscuous mode [ 263.257148][ T8044] IPVS: ftp: loaded support on port[0] = 21 [ 263.284667][ T8040] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 263.298299][ T8040] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 263.348067][ T8040] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 263.359043][ T8040] team0: Port device team_slave_0 added [ 263.368727][ T8040] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 263.378732][ T8040] team0: Port device team_slave_1 added [ 263.389874][ T8040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 17:53:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) [ 263.400121][ T8040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 263.483665][ T8040] device hsr_slave_0 entered promiscuous mode [ 263.520577][ T8040] device hsr_slave_1 entered promiscuous mode [ 263.561137][ T8040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 263.572365][ T8040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 263.587719][ T8046] IPVS: ftp: loaded support on port[0] = 21 17:53:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r2, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r2, 0x4, 0x42c02) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 263.649713][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.657052][ T8040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.664639][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.671735][ T8040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.741630][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 263.867234][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.874942][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.883682][ T8044] device bridge_slave_0 entered promiscuous mode [ 263.908737][ T8049] IPVS: ftp: loaded support on port[0] = 21 [ 263.925439][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.938471][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.947399][ T8044] device bridge_slave_1 entered promiscuous mode 17:53:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r2, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r2, 0x4, 0x42c02) write(r1, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 263.983272][ T8040] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 263.990052][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.018184][ T8044] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 264.079274][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 264.093667][ T8044] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 264.114461][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.137426][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.146621][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 264.210145][ T8046] chnl_net:caif_netlink_parms(): no params data found [ 264.226996][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.256790][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.266884][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.282932][ T8040] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 264.289701][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.300134][ T8053] IPVS: ftp: loaded support on port[0] = 21 [ 264.319018][ T8044] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 264.334404][ T8044] team0: Port device team_slave_0 added 17:53:31 executing program 5: socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f00000000c0)='dev ', 0x3) write(r1, &(0x7f00000011c0)="16", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r1, 0x409, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040044}, 0x20004014) [ 264.362494][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.371585][ T8044] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 264.379692][ T8044] team0: Port device team_slave_1 added [ 264.397048][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.421004][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.429327][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.436440][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.455003][ T8044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 264.465007][ T8044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 264.490184][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 264.501311][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 264.523278][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.530488][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.538184][ T8046] device bridge_slave_0 entered promiscuous mode [ 264.545687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.554848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.563240][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.570315][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.577736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.611468][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.618504][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.627188][ T8046] device bridge_slave_1 entered promiscuous mode [ 264.703926][ T8044] device hsr_slave_0 entered promiscuous mode [ 264.780606][ T8044] device hsr_slave_1 entered promiscuous mode [ 264.842815][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 264.856078][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 264.859567][ T8057] IPVS: ftp: loaded support on port[0] = 21 [ 264.866188][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 264.900415][ T8046] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 264.922142][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.931729][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.940140][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.948659][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.957317][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.965751][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.973830][ T8044] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 264.984510][ T8044] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 264.999220][ T8046] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 265.028142][ T8046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 265.037304][ T8046] team0: Port device team_slave_0 added [ 265.043990][ T8046] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 265.052146][ T8046] team0: Port device team_slave_1 added [ 265.062348][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 265.072894][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.081236][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.092701][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 265.116536][ T8046] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 265.135668][ T8040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 265.164056][ T8046] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 265.185747][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.194136][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.204660][ T8040] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 265.211664][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.244052][ T8044] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 265.322015][ T8046] device hsr_slave_0 entered promiscuous mode [ 265.370595][ T8046] device hsr_slave_1 entered promiscuous mode [ 265.411266][ T8046] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 265.427688][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.435883][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.444050][ T8049] device bridge_slave_0 entered promiscuous mode [ 265.453160][ T8040] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 265.460107][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.467275][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.475394][ T8049] device bridge_slave_1 entered promiscuous mode [ 265.507110][ T8049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 265.515936][ T8046] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 265.533798][ T8049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 265.571307][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.606884][ T8049] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 265.615540][ T8049] team0: Port device team_slave_0 added [ 265.633710][ T8049] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 265.645365][ T8049] team0: Port device team_slave_1 added [ 265.653080][ T8049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 265.667015][ T8046] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 265.676031][ T8053] chnl_net:caif_netlink_parms(): no params data found [ 265.696843][ T8049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 17:53:32 executing program 0: 17:53:32 executing program 0: [ 265.763926][ T8049] device hsr_slave_0 entered promiscuous mode [ 265.780690][ T8049] device hsr_slave_1 entered promiscuous mode 17:53:33 executing program 0: [ 265.845795][ T8049] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 265.864584][ T8049] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 17:53:33 executing program 0: [ 265.934166][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.942186][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.950332][ T8053] device bridge_slave_0 entered promiscuous mode [ 265.970958][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.978024][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.986464][ T8053] device bridge_slave_1 entered promiscuous mode 17:53:33 executing program 0: 17:53:33 executing program 0: [ 266.038174][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.045276][ T8049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.052709][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.059785][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state 17:53:33 executing program 0: [ 266.122497][ T8053] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.164419][ T8053] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 266.198209][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.211157][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.236577][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.243725][ T8057] chnl_net:caif_netlink_parms(): no params data found [ 266.272061][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.293616][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.305094][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.315357][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.328279][ T8053] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 266.339240][ T8053] team0: Port device team_slave_0 added [ 266.346087][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.353927][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.362439][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.371283][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.378899][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.388996][ T8046] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 266.396784][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.408186][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.422270][ T8053] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 266.430480][ T8053] team0: Port device team_slave_1 added [ 266.436820][ T8053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 266.446456][ T8053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 266.455128][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.464123][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.473270][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.480367][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.497571][ T8044] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 266.504694][ T8044] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.528642][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.548049][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.555221][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.563230][ T8057] device bridge_slave_0 entered promiscuous mode [ 266.572731][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.633497][ T8053] device hsr_slave_0 entered promiscuous mode [ 266.670576][ T8053] device hsr_slave_1 entered promiscuous mode [ 266.711841][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 266.719800][ T8053] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 266.729979][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.738708][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.747185][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.754226][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.762341][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.770940][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.779154][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.786258][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.793913][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.801765][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.809496][ T8057] device bridge_slave_1 entered promiscuous mode [ 266.834760][ T8053] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 266.844582][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.854636][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 266.865354][ T8057] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.875435][ T8057] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 266.892425][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.901278][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.909494][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.916588][ T8043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.928043][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 266.953225][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.961369][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 266.969115][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.977918][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.994672][ T8057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 267.003026][ T8057] team0: Port device team_slave_0 added [ 267.012663][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.026263][ T8057] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 267.035016][ T8057] team0: Port device team_slave_1 added [ 267.046964][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.056372][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.065450][ T8053] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 267.073434][ T8057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 267.086259][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.094156][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.102243][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.112274][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.121876][ T8049] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 267.128660][ T8049] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.137748][ T8057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 267.146602][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.157048][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 267.167434][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 267.181761][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.196879][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.205329][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.214616][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.223156][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.232060][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.240725][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.248948][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.256038][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.264066][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.271976][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.289887][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 267.299627][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 267.318367][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.328722][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.337184][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.346255][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.357339][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.368255][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 267.433729][ T8057] device hsr_slave_0 entered promiscuous mode [ 267.470743][ T8057] device hsr_slave_1 entered promiscuous mode [ 267.510539][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.519102][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.527558][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.534604][ T8054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.542301][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.552437][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 267.570476][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.578821][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.592640][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 267.603178][ T8046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 267.610938][ T8057] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 267.624406][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.632623][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.640954][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.649085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.658947][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.666695][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.676576][ T8057] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 267.689383][ T8046] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 267.696259][ T8046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.705334][ T8044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 267.716703][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 267.733651][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.742171][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.751288][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.760589][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.768864][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.778633][ T8044] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 267.785794][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.810915][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.820158][ T8057] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 267.836735][ T8044] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 267.847859][ T8046] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 267.863810][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 267.873686][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.883958][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.895854][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.907988][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.916604][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.925383][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.933278][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.943361][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 267.961837][ T8053] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 267.968636][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.975810][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.985109][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.996084][ T8049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 268.006967][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.025711][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 268.035244][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.043470][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.052024][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.061141][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.069378][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.076452][ T8054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.084590][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.116554][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 268.154593][ T8049] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 268.170702][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.202261][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.217502][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.233772][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.240895][ T8050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.412618][ T8090] sctp: [Deprecated]: syz-executor2 (pid 8090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.412618][ T8090] Use struct sctp_sack_info instead [ 268.488448][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 268.525589][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.548929][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 268.568121][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.773322][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 268.783930][ T8049] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 268.798102][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.806899][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:53:36 executing program 1: 17:53:36 executing program 0: [ 268.818865][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.829246][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.841179][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 268.865095][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 268.886959][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.908235][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.933437][ T8049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.945054][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 268.961987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.978172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.999503][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 269.021400][ T8053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 269.044079][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.054788][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.064169][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.073255][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.084772][ T8057] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 269.093305][ T8057] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.102740][ T8053] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 269.109488][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.121318][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 269.132770][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.141613][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.149886][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.157003][ T8050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.167685][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 269.181427][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.190475][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.198904][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.207433][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.214531][ T8050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.224857][ T8053] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 269.235797][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 269.244765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.262153][ T8053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.272920][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 269.282854][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.305288][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 269.331416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.344825][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.369086][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 269.387511][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.405025][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.438611][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.451835][ C0] hrtimer: interrupt took 34564 ns [ 269.460140][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 269.474903][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.483145][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.495052][ T8057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 269.504119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.513493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.524034][ T8057] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 269.531596][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.545867][ T8057] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 269.569385][ T8057] 8021q: adding VLAN 0 to HW filter on device batadv0 17:53:37 executing program 3: 17:53:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r2, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r2, 0x4, 0x42c02) write(r1, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:53:37 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xa000000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000002, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0) 17:53:37 executing program 1: 17:53:37 executing program 2: 17:53:37 executing program 0: 17:53:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x101) write$UHID_INPUT(r0, &(0x7f0000000700)={0x8, "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", 0x1000}, 0x1006) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) 17:53:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") sendfile(r0, r1, &(0x7f0000000040)=0xf0, 0x80000002) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000300), 0x0) 17:53:37 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0xa, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fcntl$setlease(r1, 0x400, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000700)={0x0, @in={{0x2, 0x0, @rand_addr=0xb23}}}, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000007c0), 0x8) ioctl$TIOCLINUX6(r1, 0x541c, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x802, 0x0) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r4 = accept4(r2, 0x0, &(0x7f0000000040)=0xffffff88, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xffc8, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x20000000000001ef}, 0x10}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000b00)=ANY=[], &(0x7f0000000080)) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000340)) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2005000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[]}, 0x1, 0x0, 0x0, 0x12}, 0x0) 17:53:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="9b8944d3", 0x4) [ 270.727654][ T8144] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 17:53:38 executing program 2: sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsuid(0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x0) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x44010, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') syz_open_dev$vcsa(0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$BLKZEROOUT(r3, 0x127f, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) accept$inet6(r2, &(0x7f0000000640)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000000680)=0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:53:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_mount_image$iso9660(&(0x7f0000000180)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[{@hide='hide'}, {@dmode={'dmode', 0x3d, 0xfffffffffffffffb}}, {@map_acorn='map=acorn'}, {@block={'block', 0x3d, 0x800}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@gid={'gid'}}, {@unhide='unhide'}, {@sbsector={'sbsector', 0x3d, 0x3ff}}, {@block={'block', 0x3d, 0xa00}}, {@sbsector={'sbsector', 0x3d, 0x3}}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/vcs\x00'}}, {@fsname={'fsname'}}, {@appraise_type='appraise_type=imasig'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 17:53:38 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r0 = gettid() ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) semget(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = semget(0x3, 0x0, 0x0) semop(r1, 0x0, 0x353) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 17:53:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r2, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r2, 0x4, 0x42c02) write(r1, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:53:38 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xa000000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000002, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0) 17:53:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0xfffffffffffffffe, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, 0x0) 17:53:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) getresuid(&(0x7f0000000140), 0x0, 0x0) stat(0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef\xe8\xa7\xc4\xba\xeel\xfaf\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88/\x9c>\f\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x7f\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\xcbE\xd9\x86d\x83\x1a)\xd6\xfb\xcc-\xe01A\xc0\xad\xe9\xcb2k\xe2\xa5\xd7\xd5\x8bLz\x92\xdb\n\xa8\x86q\xd8`{\x1e\x19\rkS\xc69\x8d\xd97\x1aj\x03ha\x0e{\x9cPx\xb8b\xf2\x05\t\xf3\x81\xc6a\x1d\xe8o\xa2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) [ 271.559782][ T8195] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 17:53:38 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xa000000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgid() syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000002, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb846000000dc", 0xa}], 0x0, 0x0) [ 271.986010][ T8214] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 17:53:39 executing program 3: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:53:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x4000010004002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x5, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ca9ca2322a2479638fd1b21f88f142f31c8d7f68d2360a845e81dfbd87bf9966fc0b9fa594066a9ae877eba555c909c54618ac8ccd9d339fc07041d5f0b46010", "47494a068dcf5affae3f00e15996336d4c908eda7300"}) 17:53:39 executing program 2: 17:53:39 executing program 3: 17:53:39 executing program 2: 17:53:39 executing program 3: 17:53:39 executing program 2: 17:53:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r2, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r2, 0x4, 0x42c02) write(r1, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:53:39 executing program 3: 17:53:40 executing program 1: 17:53:40 executing program 0: 17:53:40 executing program 3: 17:53:40 executing program 2: 17:53:40 executing program 1: 17:53:40 executing program 5: 17:53:40 executing program 1: 17:53:40 executing program 2: 17:53:40 executing program 5: 17:53:40 executing program 3: 17:53:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r1, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r1, 0x4, 0x42c02) write(r0, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 17:53:40 executing program 0: 17:53:40 executing program 1: 17:53:41 executing program 2: 17:53:41 executing program 5: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/30) 17:53:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff0", 0x16}], 0x0, 0x0) 17:53:41 executing program 0: openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x1d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) socketpair(0xa, 0x3, 0x7f, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000140)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x28) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={r0, 0x80000000, 0x1, [0xde58]}, &(0x7f0000000280)=0xa) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x82, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 17:53:41 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0x3}) 17:53:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x0, 0x0, 0x4}) 17:53:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) 17:53:41 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dc]}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 17:53:41 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) 17:53:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r1, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r1, 0x4, 0x42c02) write(r0, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 17:53:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000004c0)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4d}}, &(0x7f0000000180)='syzkaller\x00'}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'btrfs.', '\x00'}, &(0x7f0000000380)=""/239, 0xef) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x1ffe0000000000}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0x2, 0x9, 0x756, 0x5, r5}, 0x10) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000180)) getpgrp(0xffffffffffffffff) prctl$PR_GET_SECCOMP(0x15) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10308) 17:53:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0x2}) 17:53:41 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = dup(r0) connect$unix(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="82022e2f66696c653000ac5d02b52654448c02ba861398e7574180ffb96efa7beb1cb1825329e15eaa6a0e4885189f401d4417d17c88d837350ecff64559cdbde18042105f4804afe450c068e6cb4a1d7c4794ed916e42b73c0e3825cf9b53722c95a8ab6dd164b9c82f33de483f5fc10f8cc10bc907d1788b1748ad68f0d6146a4f93d94aa663348f045e461f6414d096c45655635f60612da872664cf9def1e11ff118"], 0x1) setsockopt$inet_opts(r1, 0x0, 0x20000000000001, &(0x7f0000000080)="2902095cb906008590000000", 0xc) write(r1, &(0x7f0000000280)="2693ea1e0c4bbe46c9d49b0f9f140a52977e470fdcbae21a6d07eff32a5126eccadd2dcbbc0a55ca82caea56f8b35cc60044e5157eeb6f74bd36e7e55ea89962eda2091b61bc50f1ec37da5451b32d9c3bc325013d15592a636cab5758b4964a22fd0333ad5908af32b55074ae6e3a405fed032cc8dd26ef418a40cb0e17cd429c6f4fcebc17e8ad16f2444dfa67f35aad68beab02edc80524fa73b8cf65e10bc293a6c7743116f90e", 0xa9) 17:53:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=ANY=[], &(0x7f00000003c0)='\x00', 0xfdcd, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffc, @dev={0xac, 0x14, 0xe}}, {0x2, 0x0, @local}, {0x2, 0x4, @broadcast}, 0x0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0xa0008000, 0x0, 0xffd, 0x0, 0x11}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000780)='uid\x00\x00\x00\x00\xbc\xa5\x8c\xc4\xf1\xa65\x99\x1aX\xfd\xb1bz\x03r\x00') rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c7}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3d6, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540)={0x0, 0x0, 0xfffffffffffffffc}, 0xc) tee(r5, r0, 0x6, 0x6) fcntl$setown(r2, 0x8, r3) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x4) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x4a, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r6, &(0x7f0000000800)='threaded\x00', 0xfffffffffffffd76) connect$inet6(r4, &(0x7f00000006c0)={0xa, 0x2004e23, 0x9, @ipv4={[], [], @broadcast}, 0x939}, 0x1c) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000500)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) [ 274.738283][ T8337] QAT: Invalid ioctl 17:53:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000000079) ioctl$KVM_SET_CPUID(r0, 0x80045518, &(0x7f0000000080)=ANY=[@ANYBLOB='#']) [ 275.147158][ T8345] QAT: Invalid ioctl 17:53:42 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x6, 0x80000) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x7f, 0x40ab3d8a}, 0xc) ppoll(&(0x7f00000000c0)=[{r1, 0x84a0}, {r1, 0x1000}, {r1, 0x290}, {r1, 0x2200}, {r0, 0x1d0}], 0x5, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={0xc361}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 17:53:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x101) write$UHID_INPUT(r0, &(0x7f0000000700)={0x8, "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", 0x1000}, 0x1006) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x4) 17:53:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x101) write$UHID_INPUT(r0, &(0x7f0000000700)={0x8, "f3ca2a22ccf2db500af066ad8dd7f3ba718eb2f8af8f42429645e026dae3296db99a168572e36beb6485ba0e217a8cbca9b88cc0e1e2473745ff9b3ee38fb7e3fea790cc702a1d4def3f57b75d7e91f5113e67ccdbc292c0d4f876cf89979ffc13735a5d76c8f9921600ecfaeae1756efe28890f0a4b4546accb1ca26bdb93f15b016226cad300e44834501f73bdf9a21e19f919e2becf5e3c2b592f9022166ba5e560eef9f610449610bac4d59c744f17616cf59d5d8744ec2411c08311c1dcd42a07e94b4a1205170a8aecc85630bf7591ebf26a097a1af353e958c0979f3b79429105317c0152b6b2d323b63920083abd6509797ab1ae079ce4696ef2579373fd528c4632ea30d735e22446aa652fa336249f0cbaa54bdd0b498cf529c477905e8b3a0557a4fe074a6515c6bb6e4052045fd000dbd8f7e8ae42b1508e187cb58cc8fceafe3e4f946162f9a909b504eca940447a3b6280a4e3727035a8622099606fcbf5fbf9d41d4db4e06e308948d6a926cc2b88f4c7fd0a61c13692654412efb5f8d33e3a173f74342d600680939911916867a0fca952d314ef1c2ad272d7b2ecc9678885f3b840cf4ac644119bb57099c4d5217408b80d7415d5dc840ee169d67fdae138fce7dc6f77c870ab1e5177eb3d3057238f74879f7e915777cf51111e268ea41dbea4031c29d4dc1989d6d9996a923c0a8e733578720c113e4f2cc6bd9461bece0b404267c86e039fe333c1960f1c764d5f951d88b8bddb367749a78148ade1e1f918a888bbf71a0f78f94402f8a8b51a5964eb4ea5e9de303c36c08908ec794dc8a502d0d13f7334d91d8f4d637245cad83b4053340d835fa8ce17cc0d37558c6d700b9000472963d3af4b591f5a383d9019fd748ec4989e42e2ec2e99af9673594db819823bc24f0efd9eaf96db1b758016dbb318bc18e97e3a2ade019384eeebe9a98a726dae20e4b13e7ec88cfa495aeb2f1059e16540250e10ce108ccfb38b09a5085ff64b4b83366b79e1cb1f28e5c7047fdb525b610720b39eb510303c6bc4c5a7133c8afa96e84a2b01e45d0259e9fd32ac4beb47bf6e36c79260a380a09f2df94e0f816155b099bb5af1e902bb2f5103eada2fe0730e3aabe1592f7c656a1f09510fed9bac093499ec5228fbd54c02004952975688bb8a493374a907d10c370f04df09e66af99bc902829e2755648a6b3ec49707a7d6701b94955c76a10d1d6599df72b303def2b7d8c8dca16a78ba9786290ba0f3313a855e77ff3644da7e133b4a33d8f04742bd2e74888d5b07906a6a10533f049ac69b99941a6a0ae179d45d21721cd6287b6f583df50492cf5c19c01bcfceb944200974c485ce66a89f0f7f896aae16ce35dcf9988197b1956a663ff15b905d72eb634d200536675afc31e0e1d3effb18b11b05560cd98f3fd9b4c43d0ffdd149d514938a6a50bb9ab947f9f15d86fd3008fb9db3d5ac39ae1342cf2a948f42bf8718953c2ae5ea989fc9cc5a854d31ebfa78db397dbff0ed099d9ba886bcecbd275b28906fe6a0d8692bd5256b202c6154f4dc6f7e387a0684aa1b161d591330b6302bc051a96798cb53d942647a3a696d7f380be3bc0bbf95d6227515e9fdaa603b64b9a9d6b91201758fa03884993833322e1491599b302924fc197b6f0eb0d04aaaa7c250335dd862a9dd452d5c94e8290ddf5ff2a54b35ade1e1811bebedf488a6aeca62759e605c60e97ea37d059e3f64ac0115e8641c2ed41727ad9103fdce8c8f0cdae46aafeca102416a8dfc22823e6895864c420d14eef8ca522925f7b3ae8944f8c338ca4b21725ef3ae0fc89ea08dd3c43cebab12285f3282950dfe19886d6760b5deb772391b7518c5ae3869e3b5640fadef177a1c27bc8c6de589b0880c76e983b5941cda26a21ca436e9293f8693c9d09d0b1676c16d2a8f6229e75580f01fd7a7ffd3ba9c777309acec112114c30cd9b89bb62d0923d88974154ed8678748272bc9e7e50f10c1f231444c8d8cb57f22bb134bc826f6c13f248266a6d81b6266d3402e040600e668aa7ad3cd48cf17b5bec8172640e4ed04ccaf7cbf6a5601ffc3b0cf8d549484f9dea4cc50834f34db2f36e6856c8a72d4b78afcb764e346f06778587807f017f4d3c02b43141d68e274d419fdf54145045397bc1758d29f67c6176a366015a07aa59550f0a48ed7c81f518a66f1401838cf193c62265c3a6cdcfb2a9c920d4851caeaf7b1090419f62045f66494abd38ab1118589e9ebcc6aaa21f85bef17b7a51f008f0695e605285c6a585ae9237466794b7db3aad74f6389e50507d3476a5b985ec69b2a2d2acdebeacffd4f2cba3291c5824e4cfaaea478816711b25755c383ecf0885627773531c8648f6bccfc7f1a8d6dddfc7355588ce7e8713447232394185fd625119569eb7d5b45226013171fdaa5931ef136af8111a2598abb1f57714be887a22762c09599d244a23e922f5a190986fa590947dca5c587bef023aa07eab91049bd7e771a8b7571f376fec8c51e6ad3056551c6bad77ef743229edaec7da59c764b77eb9d73f94cb87b018d6e2d3cfebb060475287bb173e594be1dd60f7de8643c449e890acf42c4409e4c4e997687bee4e983a50de7f9a5fe38d0ad3350ed1e6f380e78be0ff0264241dd9cd2af184a8ea93df2a88bcbb9dcd2832e17ec0a866e133a0f9c0e643956dd7859b1e633028ae209845e23ea7367f1696afaa837b35ca79dbcf39d8fcd3fc53a4d3375fdfe3faa2dc94da38a328870336943ccf371c644f363a25daade5fd6854c7b6ddfc644e83d69be38f8bd9569bf0330fcb9572bcbee4b383eab7d6245936cc0244f0fea4f8d897d7ee2556431c473a7a7953c797cc55a286dec7d8030472c6e91912cac2351b748907c71d9dea94298ebb2a21d1b0f8fd1fdbedc31276b8a693c10f2784b3b9b6c004de13d75e0323b7ebf4df0e134ac0f011efd576876a7d3c6e1cbaa2dab17e182d632dc34710c7add8ba526c75e57be0adc3aeb038c686a4aa9c0bed7fe26e2f57006c6bce673ecc253a72156c98f7d0f7d0bd114a19c6a7a1267c0dbef363938a17182a8a8625063f0381b80034e7bc2b89547f2a37bf08392237fc651bfb44f8da685e4e43bdc3a0be30468079722a88caea6eeea7ee6f677cbc12aced969a931f249ba6fe41217980cf112d42838bc872477c7fa85867f48b305d04470b349f102d326c9805d487b77871f8055ee0ceaae52e34b51e184a30992d108ac4399a133a0a3c5608c44b7a2c2150fcf138eb2dc85f0fe83e72c0aa4d8cc9c20312b887afb8898b772f1de385439e1d46eb0a38c736cd0f93bc178195637bed97196c00f2102706161e30f9f4a2248378c52764d31a4fa90774ee3f0f6ed8135d5b64effd9c5ef090e06c1f438a974721f2fadec07542b13afeb7e59ac977f4440f0f412caeeebb11a52de4fab5f65fa057cfce10fcef642d9d821d5219f2610357468b7ce189fd6cbdda2025b8e3e10cea575cfe76381b6eaf584998d415aaf23ed626980291d026bf17ce6dffb396ae7cde388cfc11320ca461923effa97324b2330ee16e132f52dbe32a45ba38c370d421731c70d73fcf65a46ba21b4e9cdf9783f721f854d8f1ed4f6694d8535ab09ed78000a26ef40ce6b0bfb8bff7ecd080c4b474644f42e7fa183356fc718d55fdda8ebbf8ff458dcc200c987e1c25e53510607bd37e077a0d1fef1951c91e6475e144040692fdff2f210bbc39bd991c809c4502cdae6937c2af0000b067c523394927f26454f59461ff83a3f7345e0726c10ea62e78767916f396e3be0438e465fee4b7a4196be77fc1e897d5776467ddcafd91681db711f647d489c7ff6e51b12af54ba5a800921759d61d95ab421053fab3c8cced66e793d9ca6ef56d0d8bea1f9337e22c6877c7e583cc1ce3173a3883e653077236483ba7e35a4f24812f404b977e1b95c2278c0e1b26bac6241869be99d16ac484f36013e4b22294c0c768526e5610a043385959fb7931b5e9e553bdfc1ba790a02586678fc0e5f27b6898f31c30f41c97baec8558905b438cb1f51e07b11881052a0573987e90737b06a3d0058eb0988c1fb44da90c39ec8d580e991b5e305cabb24a995d2d0d26bed1f7ae549412a5ecebf87cec9cda827ae7dbb0e8d07befcc14a25574d732047b39116f8835732e1c2290a8890a5f9bab525076e104eeba2f7a2879b68abc58f0399f329e17d101253bf035474351db4cc9b69118919aa648f10e369d50b4dccd350b32bb391b7e18559f797483d6f9b11c9b2b3c42169d3e0da5acd049c26c937efa0694d3427b9fc3ca58f9fd5ca037d875dbc8890819028ff1ac23d40aabc31e7fc6ad10097623344bb9bcc8d7dd870fad8eea70f7f0c6f25027b7eb3cd86466b38c4ae83ce99d549728968f6a59173daba7e47a44136f739e16db02d92eb450e3682a889858506ade7125b3cd3d53029a9b01fde3898a696f1ae2815f849d2c2f8ea9bdcd246982630a520d24ea073f96ac22c8e3659de7043bc3e91e57e868b26a7ce1cfc17d9844aeedf2e367e9a05971db6ba37a9829427fc1eac37e002133a47ae7a7dca94eab2425e048556570c5d4455bb64a38e7db004607ab170e7602ee837ce6904aaae081da949502e3f40609d8e9b181f73f49366d32981fee271b7fe2e05b8274bddf9e34b5c126d46139f797fcf1099d961baed2c1fcbaf1e8f36b177e2108bb29d9d7c9c97f5cbc2719338f69fd606db71e1618a225d559711f40c6ccad50688ed7e3f3d4de44029ceaa9ef426a6321d8fc7a72d5a3fb88678933160010063aeb81b93d85c90d472e1f7d39854d2d4bc08eb32358489df4cb6508f1129e26c1e3c36a9424474979e0da1baa514e7d59efe9f2cb380fa052a032a2dd16d58b107a6c5cdc2f2c9b09dd76ca2b9572d4fb830bdd2d8e666e6e9d805ef09bf43f8a5c66eb7bfbc740c60eba4f02bb34438ef3e7f841331707276d2f2a7867f1a3363154c79d109a15feea36fbbf0f6cb2b4ecf065591ca9004bf5539e4f4c07cdb487e7d230ccde33623e9dfc84d19a7b0c9d278618f11ec16063a3c80f790e16358ddb62e2249d3974b87a1c0cb2247a09b96077387ea63c91c759d46caae815c60d309299ffabd6f1e4ac4b82ed59db6e1e3bb82db64161c2fc937f7d21ce0a36fc21f677cf85ebd3fe3341bc2e1922863c97b58d48219c2bc6f4bc9d430b6061978a3b7bfb25df9da24a4f89e9035529220b7b55c0fcaba03d7d1503d73adbc1e1088072359126ee0e48272d112a350ebe81375fb55de0fbed35a142c3edd33fc9f42180eabbc9610938824cd4257e98f977497cdb80646cf59d540ccfef9dc5f1fe3a05662d1e46be0941e35bcd8f8a3a7d28a0bb78728eb144a3ed8ed0ea4af99bee584c7482b095772f09e2c6afe6f6f7a9bcf43ade54a5e308e42cae43c9a7b15d76514684323647e923b5b346fe008e116a9d4babbf87970d98e3426f24ea4b4b0bcd718a30a7d122be2e2cdf551f339dc5220f8a0e0d649f3bee6fde994dac707dfeed15d2fcf43b7c6e2b5ba0429af4c8648a87c4d7694abfed36c44c6014517f0ca4edb334fa84269ab369277fada2eda1d08f40ace3011c27497be401060f402414ff389ad75c677e4a6cb4ce6b7b662621198e67316e273d2765208067cecd28b2a51f0b6a7f369fe139a3be8d2779d988b084c60229a4eb0af7625c540b6db4150a55471147b54b4d397dbff4b97205068fbe7960e658c8e6ee0", 0x1000}, 0x1006) 17:53:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x7) 17:53:42 executing program 2: 17:53:42 executing program 2: 17:53:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r1, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r1, 0x4, 0x42c02) write(r0, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 17:53:42 executing program 1: 17:53:42 executing program 2: 17:53:42 executing program 2: 17:53:43 executing program 1: 17:53:43 executing program 2: 17:53:43 executing program 0: 17:53:44 executing program 5: 17:53:44 executing program 1: 17:53:44 executing program 2: 17:53:44 executing program 0: 17:53:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r2, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r2, 0x4, 0x42c02) write(r1, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:53:44 executing program 3: 17:53:44 executing program 1: 17:53:44 executing program 0: 17:53:44 executing program 3: 17:53:44 executing program 2: 17:53:44 executing program 5: 17:53:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) close(r0) 17:53:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 17:53:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x1000000, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 17:53:44 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8400, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) clock_getres(0x3, 0x0) mkdir(0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) gettid() clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00'}, 0x10) 17:53:44 executing program 5: [ 277.437395][ T8435] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 277.571875][ T8435] ================================================================== [ 277.580151][ T8435] BUG: KASAN: slab-out-of-bounds in kvm_clear_dirty_log_protect+0x8cf/0x970 [ 277.588824][ T8435] Read of size 8 at addr ffff8880a82eded0 by task syz-executor1/8435 [ 277.596875][ T8435] [ 277.599224][ T8435] CPU: 1 PID: 8435 Comm: syz-executor1 Not tainted 5.0.0-rc1-next-20190111 #10 [ 277.608152][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.618254][ T8435] Call Trace: [ 277.621624][ T8435] dump_stack+0x1db/0x2d0 [ 277.625980][ T8435] ? dump_stack_print_info.cold+0x20/0x20 [ 277.631750][ T8435] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 277.637794][ T8435] print_address_description.cold+0x7c/0x20d [ 277.643782][ T8435] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 277.649775][ T8435] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 277.655763][ T8435] kasan_report.cold+0x1b/0x40 [ 277.660545][ T8435] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 277.666538][ T8435] __asan_report_load8_noabort+0x14/0x20 [ 277.672191][ T8435] kvm_clear_dirty_log_protect+0x8cf/0x970 [ 277.678027][ T8435] ? vcpu_stat_get_per_vm_open+0x40/0x40 [ 277.683703][ T8435] ? lock_downgrade+0xbe0/0xbe0 [ 277.688564][ T8435] ? lock_release+0xc40/0xc40 [ 277.693324][ T8435] kvm_vm_ioctl_clear_dirty_log+0xff/0x260 [ 277.699144][ T8435] ? kvm_vm_ioctl_get_dirty_log+0x260/0x260 [ 277.705107][ T8435] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 277.711426][ T8435] ? _copy_from_user+0xdd/0x150 [ 277.716290][ T8435] kvm_vm_ioctl+0xc19/0x1fe0 [ 277.720897][ T8435] ? __lock_acquire+0x572/0x4a10 [ 277.725846][ T8435] ? kasan_check_read+0x11/0x20 [ 277.730729][ T8435] ? do_raw_spin_unlock+0xa0/0x330 [ 277.735864][ T8435] ? kvm_unregister_device_ops+0x70/0x70 [ 277.741562][ T8435] ? mark_held_locks+0x100/0x100 [ 277.746587][ T8435] ? get_futex_key+0x2070/0x2070 [ 277.751548][ T8435] ? add_lock_to_list.isra.0+0x450/0x450 [ 277.757184][ T8435] ? mark_held_locks+0x100/0x100 [ 277.762145][ T8435] ? __fget+0x473/0x710 [ 277.766302][ T8435] ? find_held_lock+0x35/0x120 [ 277.771083][ T8435] ? __fget+0x473/0x710 [ 277.775245][ T8435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.781490][ T8435] ? lock_downgrade+0xbe0/0xbe0 [ 277.786351][ T8435] ? kasan_check_read+0x11/0x20 [ 277.791257][ T8435] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 277.797245][ T8435] ? rcu_read_unlock_special+0x380/0x380 [ 277.802902][ T8435] ? __fget+0x49a/0x710 [ 277.807086][ T8435] ? ksys_dup3+0x660/0x660 [ 277.811519][ T8435] ? lock_release+0xc40/0xc40 [ 277.816230][ T8435] ? kvm_unregister_device_ops+0x70/0x70 [ 277.821909][ T8435] do_vfs_ioctl+0x107b/0x17d0 [ 277.826596][ T8435] ? ioctl_preallocate+0x2f0/0x2f0 [ 277.831712][ T8435] ? __fget_light+0x2db/0x420 [ 277.836397][ T8435] ? fget_raw+0x20/0x20 [ 277.840590][ T8435] ? put_timespec64+0x115/0x1b0 [ 277.845458][ T8435] ? nsecs_to_jiffies+0x30/0x30 [ 277.850350][ T8435] ? do_syscall_64+0x8c/0x800 [ 277.855028][ T8435] ? do_syscall_64+0x8c/0x800 [ 277.859745][ T8435] ? lockdep_hardirqs_on+0x415/0x5d0 [ 277.865103][ T8435] ? security_file_ioctl+0x93/0xc0 [ 277.870222][ T8435] ksys_ioctl+0xab/0xd0 [ 277.874405][ T8435] __x64_sys_ioctl+0x73/0xb0 [ 277.878999][ T8435] do_syscall_64+0x1a3/0x800 [ 277.883603][ T8435] ? syscall_return_slowpath+0x5f0/0x5f0 [ 277.889237][ T8435] ? prepare_exit_to_usermode+0x232/0x3b0 [ 277.894964][ T8435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.900734][ T8435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 277.906626][ T8435] RIP: 0033:0x457ec9 [ 277.910536][ T8435] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.930141][ T8435] RSP: 002b:00007f49a1553c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.938560][ T8435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 277.946539][ T8435] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 277.946555][ T8435] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 277.946563][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49a15546d4 [ 277.946571][ T8435] R13: 00000000004ca068 R14: 00000000004d2b90 R15: 00000000ffffffff [ 277.946592][ T8435] [ 277.970649][ T8435] Allocated by task 8435: [ 277.970667][ T8435] save_stack+0x45/0xd0 [ 277.970682][ T8435] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 277.970695][ T8435] kasan_kmalloc+0x9/0x10 [ 277.970707][ T8435] __kmalloc_node+0x4e/0x70 [ 277.970758][ T8435] kvmalloc_node+0x68/0x100 [ 277.989453][ T8435] __kvm_set_memory_region+0x1da1/0x2c40 [ 277.989474][ T8435] kvm_set_memory_region+0x2f/0x60 [ 278.019069][ T8435] kvm_vm_ioctl+0xafa/0x1fe0 [ 278.019089][ T8435] do_vfs_ioctl+0x107b/0x17d0 [ 278.028328][ T8435] ksys_ioctl+0xab/0xd0 [ 278.032482][ T8435] __x64_sys_ioctl+0x73/0xb0 [ 278.037077][ T8435] do_syscall_64+0x1a3/0x800 [ 278.041673][ T8435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.047560][ T8435] [ 278.049885][ T8435] Freed by task 7644: [ 278.053881][ T8435] save_stack+0x45/0xd0 [ 278.058052][ T8435] __kasan_slab_free+0x102/0x150 [ 278.062992][ T8435] kasan_slab_free+0xe/0x10 [ 278.067494][ T8435] kfree+0xcf/0x230 [ 278.071343][ T8435] free_bprm+0x1a9/0x220 [ 278.075596][ T8435] __do_execve_file.isra.0+0x1de5/0x2700 [ 278.081227][ T8435] __x64_sys_execve+0x8f/0xc0 [ 278.085908][ T8435] do_syscall_64+0x1a3/0x800 [ 278.090497][ T8435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.096387][ T8435] [ 278.098712][ T8435] The buggy address belongs to the object at ffff8880a82edec0 [ 278.098712][ T8435] which belongs to the cache kmalloc-32 of size 32 [ 278.112585][ T8435] The buggy address is located 16 bytes inside of [ 278.112585][ T8435] 32-byte region [ffff8880a82edec0, ffff8880a82edee0) [ 278.125687][ T8435] The buggy address belongs to the page: [ 278.131316][ T8435] page:ffffea0002a0bb40 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880a82edfc1 [ 278.141457][ T8435] flags: 0x1fffc0000000200(slab) [ 278.146422][ T8435] raw: 01fffc0000000200 ffffea0002a6fd48 ffff88812c3f1248 ffff88812c3f01c0 [ 278.155016][ T8435] raw: ffff8880a82edfc1 ffff8880a82ed000 000000010000003f 0000000000000000 [ 278.163616][ T8435] page dumped because: kasan: bad access detected [ 278.170017][ T8435] [ 278.172348][ T8435] Memory state around the buggy address: [ 278.177978][ T8435] ffff8880a82edd80: 04 fc fc fc fc fc fc fc 04 fc fc fc fc fc fc fc [ 278.186045][ T8435] ffff8880a82ede00: 00 00 fc fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 278.194103][ T8435] >ffff8880a82ede80: 00 00 fc fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 278.202173][ T8435] ^ [ 278.208861][ T8435] ffff8880a82edf00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 278.216921][ T8435] ffff8880a82edf80: 02 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 278.224974][ T8435] ================================================================== [ 278.233028][ T8435] Disabling lock debugging due to kernel taint [ 278.240078][ T8435] Kernel panic - not syncing: panic_on_warn set ... [ 278.246677][ T8435] CPU: 1 PID: 8435 Comm: syz-executor1 Tainted: G B 5.0.0-rc1-next-20190111 #10 [ 278.256984][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.267027][ T8435] Call Trace: [ 278.270323][ T8435] dump_stack+0x1db/0x2d0 [ 278.274651][ T8435] ? dump_stack_print_info.cold+0x20/0x20 [ 278.280427][ T8435] panic+0x2cb/0x65c [ 278.284327][ T8435] ? add_taint.cold+0x16/0x16 [ 278.289023][ T8435] ? trace_hardirqs_on+0xb4/0x310 [ 278.294056][ T8435] ? trace_hardirqs_on+0xb4/0x310 [ 278.299112][ T8435] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 278.305092][ T8435] end_report+0x47/0x4f [ 278.309263][ T8435] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 278.315278][ T8435] kasan_report.cold+0xe/0x40 17:53:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r2, &(0x7f00000007c0), 0x4da0d002771356, 0x0) fcntl$setstatus(r2, 0x4, 0x42c02) write(r1, &(0x7f0000000340), 0x10000014c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:53:45 executing program 2: 17:53:45 executing program 5: 17:53:45 executing program 3: 17:53:45 executing program 0: [ 278.319956][ T8435] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 278.325944][ T8435] __asan_report_load8_noabort+0x14/0x20 [ 278.331585][ T8435] kvm_clear_dirty_log_protect+0x8cf/0x970 [ 278.337391][ T8435] ? vcpu_stat_get_per_vm_open+0x40/0x40 [ 278.343059][ T8435] ? lock_downgrade+0xbe0/0xbe0 [ 278.347905][ T8435] ? lock_release+0xc40/0xc40 [ 278.352589][ T8435] kvm_vm_ioctl_clear_dirty_log+0xff/0x260 [ 278.358413][ T8435] ? kvm_vm_ioctl_get_dirty_log+0x260/0x260 [ 278.364312][ T8435] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.367646][ T3866] kobject: 'loop4' (0000000060e14441): kobject_uevent_env [ 278.370562][ T8435] ? _copy_from_user+0xdd/0x150 [ 278.370579][ T8435] kvm_vm_ioctl+0xc19/0x1fe0 [ 278.370592][ T8435] ? __lock_acquire+0x572/0x4a10 [ 278.370606][ T8435] ? kasan_check_read+0x11/0x20 [ 278.370621][ T8435] ? do_raw_spin_unlock+0xa0/0x330 [ 278.370636][ T8435] ? kvm_unregister_device_ops+0x70/0x70 [ 278.370654][ T8435] ? mark_held_locks+0x100/0x100 [ 278.370679][ T8435] ? get_futex_key+0x2070/0x2070 17:53:45 executing program 5: [ 278.380291][ T3866] kobject: 'loop4' (0000000060e14441): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 278.382630][ T8435] ? add_lock_to_list.isra.0+0x450/0x450 [ 278.433242][ T8435] ? mark_held_locks+0x100/0x100 [ 278.438191][ T8435] ? __fget+0x473/0x710 [ 278.442340][ T8435] ? find_held_lock+0x35/0x120 [ 278.447116][ T8435] ? __fget+0x473/0x710 [ 278.451281][ T8435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.457515][ T8435] ? lock_downgrade+0xbe0/0xbe0 [ 278.462382][ T8435] ? kasan_check_read+0x11/0x20 [ 278.467224][ T8435] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 278.473196][ T8435] ? rcu_read_unlock_special+0x380/0x380 [ 278.478825][ T8435] ? __fget+0x49a/0x710 [ 278.482976][ T8435] ? ksys_dup3+0x660/0x660 [ 278.487380][ T8435] ? lock_release+0xc40/0xc40 [ 278.492071][ T8435] ? kvm_unregister_device_ops+0x70/0x70 [ 278.497698][ T8435] do_vfs_ioctl+0x107b/0x17d0 [ 278.502387][ T8435] ? ioctl_preallocate+0x2f0/0x2f0 [ 278.507503][ T8435] ? __fget_light+0x2db/0x420 [ 278.512182][ T8435] ? fget_raw+0x20/0x20 [ 278.516332][ T8435] ? put_timespec64+0x115/0x1b0 [ 278.521172][ T8435] ? nsecs_to_jiffies+0x30/0x30 [ 278.526033][ T8435] ? do_syscall_64+0x8c/0x800 [ 278.530707][ T8435] ? do_syscall_64+0x8c/0x800 [ 278.535392][ T8435] ? lockdep_hardirqs_on+0x415/0x5d0 [ 278.540675][ T8435] ? security_file_ioctl+0x93/0xc0 [ 278.545781][ T8435] ksys_ioctl+0xab/0xd0 [ 278.549952][ T8435] __x64_sys_ioctl+0x73/0xb0 [ 278.554546][ T8435] do_syscall_64+0x1a3/0x800 [ 278.559145][ T8435] ? syscall_return_slowpath+0x5f0/0x5f0 [ 278.564773][ T8435] ? prepare_exit_to_usermode+0x232/0x3b0 [ 278.570518][ T8435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.576081][ T8435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.581980][ T8435] RIP: 0033:0x457ec9 [ 278.585898][ T8435] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.605505][ T8435] RSP: 002b:00007f49a1553c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.613916][ T8435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 278.621875][ T8435] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 278.629836][ T8435] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.637800][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49a15546d4 [ 278.645763][ T8435] R13: 00000000004ca068 R14: 00000000004d2b90 R15: 00000000ffffffff [ 278.654687][ T8435] Kernel Offset: disabled [ 278.659003][ T8435] Rebooting in 86400 seconds..