[   37.200503][   T23] audit: type=1800 audit(1570241460.587:22): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0
[   37.235230][   T23] audit: type=1800 audit(1570241460.587:23): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0
[   37.255779][   T23] audit: type=1800 audit(1570241460.587:24): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="sudo" dev="sda1" ino=2487 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts.
2019/10/05 02:11:09 fuzzer started
2019/10/05 02:11:11 dialing manager at 10.128.0.105:35709
2019/10/05 02:11:11 syscalls: 2523
2019/10/05 02:11:11 code coverage: enabled
2019/10/05 02:11:11 comparison tracing: enabled
2019/10/05 02:11:11 extra coverage: extra coverage is not supported by the kernel
2019/10/05 02:11:11 setuid sandbox: enabled
2019/10/05 02:11:11 namespace sandbox: enabled
2019/10/05 02:11:11 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/05 02:11:11 fault injection: enabled
2019/10/05 02:11:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/05 02:11:11 net packet injection: enabled
2019/10/05 02:11:11 net device setup: enabled
2019/10/05 02:11:11 concurrency sanitizer: enabled
02:11:13 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9, 0x209e1e, 0x418000000004, 0x1, 0xffffffffffffff9c}, 0x18)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fff8, 0x0, 0x820005, 0x0, 0x3643}, 0x2c)

syzkaller login: [   49.882192][ T7349] IPVS: ftp: loaded support on port[0] = 21
02:11:13 executing program 1:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

[   49.971830][ T7349] chnl_net:caif_netlink_parms(): no params data found
[   50.019604][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.041425][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.049611][ T7349] device bridge_slave_0 entered promiscuous mode
[   50.072669][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.079841][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.087916][ T7349] device bridge_slave_1 entered promiscuous mode
[   50.135241][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.162817][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.204138][ T7349] team0: Port device team_slave_0 added
[   50.221996][ T7349] team0: Port device team_slave_1 added
02:11:13 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, "ba3d3ee2390f383bfb0f25247f012ad576dbe28e60733243217adf25b5ba11ef"})

[   50.303796][ T7349] device hsr_slave_0 entered promiscuous mode
[   50.350976][ T7349] device hsr_slave_1 entered promiscuous mode
[   50.428282][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.435418][ T7349] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.442904][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.450024][ T7349] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.499473][ T7352] IPVS: ftp: loaded support on port[0] = 21
[   50.583372][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.609701][ T7349] 8021q: adding VLAN 0 to HW filter on device team0
[   50.620052][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
02:11:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

[   50.629984][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.648958][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.659471][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   50.703846][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.714971][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.722072][ T7354] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.732380][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.741209][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.748254][ T7354] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.788745][ T7356] IPVS: ftp: loaded support on port[0] = 21
[   50.813649][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.823878][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.852910][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.879768][ T7349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.902590][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.926270][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.935048][ T7354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.980435][ T7359] IPVS: ftp: loaded support on port[0] = 21
[   51.005786][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0
02:11:14 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

[   51.051963][ T7352] chnl_net:caif_netlink_parms(): no params data found
[   51.219802][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.251899][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.270618][ T7352] device bridge_slave_0 entered promiscuous mode
[   51.310664][ T7356] chnl_net:caif_netlink_parms(): no params data found
[   51.320197][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.340636][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.348645][ T7352] device bridge_slave_1 entered promiscuous mode
[   51.478380][ T7359] chnl_net:caif_netlink_parms(): no params data found
[   51.510470][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.542679][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
02:11:15 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9, 0x209e1e, 0x418000000004, 0x1, 0xffffffffffffff9c}, 0x18)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fff8, 0x0, 0x820005, 0x0, 0x3643}, 0x2c)

02:11:15 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9, 0x209e1e, 0x418000000004, 0x1, 0xffffffffffffff9c}, 0x18)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fff8, 0x0, 0x820005, 0x0, 0x3643}, 0x2c)

[   51.601396][ T7352] team0: Port device team_slave_0 added
[   51.612063][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.619291][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.671469][ T7356] device bridge_slave_0 entered promiscuous mode
[   51.699125][ T7368] IPVS: ftp: loaded support on port[0] = 21
[   51.706364][ T7352] team0: Port device team_slave_1 added
02:11:15 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9, 0x209e1e, 0x418000000004, 0x1, 0xffffffffffffff9c}, 0x18)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fff8, 0x0, 0x820005, 0x0, 0x3643}, 0x2c)

[   51.725948][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.739268][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.751544][ T7356] device bridge_slave_1 entered promiscuous mode
[   51.813720][ T7352] device hsr_slave_0 entered promiscuous mode
[   51.871095][ T7352] device hsr_slave_1 entered promiscuous mode
02:11:15 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9, 0x209e1e, 0x418000000004, 0x1, 0xffffffffffffff9c}, 0x18)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fff8, 0x0, 0x820005, 0x0, 0x3643}, 0x2c)

[   51.913149][ T7352] debugfs: Directory 'hsr0' with parent '/' already present!
[   51.949603][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.963142][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.971826][ T7359] device bridge_slave_0 entered promiscuous mode
[   52.003608][ T7381] IPVS: ftp: loaded support on port[0] = 21
[   52.006548][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.017459][ T7352] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.024784][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.031890][ T7352] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.053303][ T7356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.063317][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.070352][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.079415][ T7359] device bridge_slave_1 entered promiscuous mode
[   52.088157][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state
02:11:15 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0)

[   52.103928][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.162568][ T7356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
02:11:15 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0)

[   52.211368][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.229834][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.242415][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.266150][ T7356] team0: Port device team_slave_0 added
02:11:15 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0)

[   52.328403][ T7356] team0: Port device team_slave_1 added
[   52.372023][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.379664][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
02:11:15 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0)

[   52.433005][ T7359] team0: Port device team_slave_0 added
[   52.439857][ T7352] 8021q: adding VLAN 0 to HW filter on device team0
[   52.493660][ T7356] device hsr_slave_0 entered promiscuous mode
[   52.530954][ T7356] device hsr_slave_1 entered promiscuous mode
[   52.560749][ T7356] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.575381][ T7359] team0: Port device team_slave_1 added
[   52.606114][ T7368] chnl_net:caif_netlink_parms(): no params data found
[   52.649829][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.670143][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.678582][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.685743][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.693952][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.702664][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.711050][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.718089][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.725873][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.734652][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.743256][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.751719][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.759981][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.768532][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.777704][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.843901][ T7359] device hsr_slave_0 entered promiscuous mode
[   52.871006][ T7359] device hsr_slave_1 entered promiscuous mode
[   52.920745][ T7359] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.940181][ T7352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.950899][ T7352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.972188][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.980418][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.989321][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.997996][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.006307][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.019260][ T7381] chnl_net:caif_netlink_parms(): no params data found
[   53.074320][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.081602][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.089399][ T7368] device bridge_slave_0 entered promiscuous mode
[   53.097233][ T7368] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.104328][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.112583][ T7368] device bridge_slave_1 entered promiscuous mode
[   53.139229][ T7368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.154278][ T7368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.163674][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.170830][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.178641][ T7381] device bridge_slave_0 entered promiscuous mode
[   53.186752][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.194191][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.202223][ T7381] device bridge_slave_1 entered promiscuous mode
[   53.216922][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.261655][ T7381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.276627][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.303455][ T7381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.330141][ T7368] team0: Port device team_slave_0 added
[   53.337080][ T7368] team0: Port device team_slave_1 added
[   53.349241][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.357074][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.370420][ T7381] team0: Port device team_slave_0 added
[   53.392902][ T7356] 8021q: adding VLAN 0 to HW filter on device team0
[   53.414443][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.422228][   T23] kauditd_printk_skb: 6 callbacks suppressed
[   53.422253][   T23] audit: type=1804 audit(1570241476.857:31): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir538875075/syzkaller.jZ3v6R/0/bus" dev="sda1" ino=16520 res=1
[   53.432263][ T7381] team0: Port device team_slave_1 added
[   53.462108][   T23] audit: type=1804 audit(1570241476.897:32): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir538875075/syzkaller.jZ3v6R/0/bus" dev="sda1" ino=16520 res=1
02:11:16 executing program 1:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

[   53.506086][ T7359] 8021q: adding VLAN 0 to HW filter on device team0
[   53.553722][ T7368] device hsr_slave_0 entered promiscuous mode
[   53.560037][   T23] audit: type=1804 audit(1570241476.987:33): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir538875075/syzkaller.jZ3v6R/1/bus" dev="sda1" ino=16520 res=1
[   53.615010][ T7368] device hsr_slave_1 entered promiscuous mode
[   53.650685][ T7368] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.659020][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.667636][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.676080][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.683231][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.692282][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.701020][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.709209][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.716262][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.724058][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.732894][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.741393][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.749622][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.758107][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.766799][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.775306][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.783504][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.791668][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.799746][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.807901][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.815518][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.823416][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.831474][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.904358][ T7381] device hsr_slave_0 entered promiscuous mode
[   53.951122][ T7381] device hsr_slave_1 entered promiscuous mode
[   53.991052][ T7381] debugfs: Directory 'hsr0' with parent '/' already present!
[   54.000289][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.014625][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.023241][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.031675][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.038788][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.049830][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.066772][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.075576][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.086997][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.094160][ T7357] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.121354][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.130357][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.145773][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.163346][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.173266][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.186897][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.206237][ T7359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.217754][ T7359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.237244][ T7368] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.252148][ T7381] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.259156][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.269615][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.278955][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.288559][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.297777][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.306469][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.315003][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.329835][ T7368] 8021q: adding VLAN 0 to HW filter on device team0
[   54.347910][ T7381] 8021q: adding VLAN 0 to HW filter on device team0
[   54.358245][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.366557][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.374928][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.382872][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.390907][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.399462][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.408088][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.415131][ T7357] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.423637][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.482779][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.492614][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.502080][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.509122][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.517769][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
02:11:17 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, "ba3d3ee2390f383bfb0f25247f012ad576dbe28e60733243217adf25b5ba11ef"})

[   54.526884][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.535998][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.543084][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.551980][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.561380][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.571014][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.579851][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.589153][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.606906][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.616082][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.631733][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.640099][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.647167][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.657637][ T7359] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.674369][ T7368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.686085][ T7368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.698187][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.707073][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.717262][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.732232][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.745492][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.754881][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.764746][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.773931][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.783658][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.792766][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.805644][ T7381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.816953][ T7381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.829329][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.839178][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.847820][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.856863][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.865847][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.874294][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.883629][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.892532][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.901544][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.915793][ T7381] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.937685][ T7368] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.049381][    C0] hrtimer: interrupt took 26769 ns
[   55.100635][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   55.106444][    C0] protocol 88fb is buggy, dev hsr_slave_1
[   55.112439][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   55.118215][    C0] protocol 88fb is buggy, dev hsr_slave_1
[   55.220656][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   55.226461][    C0] protocol 88fb is buggy, dev hsr_slave_1
[   55.232321][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   55.238084][    C0] protocol 88fb is buggy, dev hsr_slave_1
[   55.340637][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   55.346429][    C0] protocol 88fb is buggy, dev hsr_slave_1
02:11:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:19 executing program 1:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

02:11:19 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0)

02:11:19 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, "ba3d3ee2390f383bfb0f25247f012ad576dbe28e60733243217adf25b5ba11ef"})

02:11:19 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9, 0x209e1e, 0x418000000004, 0x1, 0xffffffffffffff9c}, 0x18)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fff8, 0x0, 0x820005, 0x0, 0x3643}, 0x2c)

02:11:19 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

[   55.658166][   T23] audit: type=1804 audit(1570241479.087:34): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir538875075/syzkaller.jZ3v6R/2/bus" dev="sda1" ino=16537 res=1
02:11:19 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, "ba3d3ee2390f383bfb0f25247f012ad576dbe28e60733243217adf25b5ba11ef"})

02:11:19 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:19 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0)

02:11:19 executing program 1:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

02:11:19 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9, 0x209e1e, 0x418000000004, 0x1, 0xffffffffffffff9c}, 0x18)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fff8, 0x0, 0x820005, 0x0, 0x3643}, 0x2c)

02:11:19 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

[   56.170532][   T23] audit: type=1804 audit(1570241479.597:35): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir538875075/syzkaller.jZ3v6R/3/bus" dev="sda1" ino=16539 res=1
02:11:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:20 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0)

02:11:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:20 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:20 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:21 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:21 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:22 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:22 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:23 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:23 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, "ba3d3ee2390f383bfb0f25247f012ad576dbe28e60733243217adf25b5ba11ef"})

02:11:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

02:11:23 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:23 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, "ba3d3ee2390f383bfb0f25247f012ad576dbe28e60733243217adf25b5ba11ef"})

[   60.640629][    C0] net_ratelimit: 14 callbacks suppressed
[   60.640646][    C0] protocol 88fb is buggy, dev hsr_slave_0
[   60.652153][    C0] protocol 88fb is buggy, dev hsr_slave_1
02:11:24 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c80ff4))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000304000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000321000)={0xbfffffffc000000d})

02:11:24 executing program 5:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

02:11:24 executing program 4:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

02:11:24 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x0, 0x0, "ba3d3ee2390f383bfb0f25247f012ad576dbe28e60733243217adf25b5ba11ef"})

02:11:24 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x9)
pipe(&(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000440))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[   60.898821][   T23] audit: type=1804 audit(1570241484.327:36): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir720369867/syzkaller.Tx0qcY/7/bus" dev="sda1" ino=16567 res=1
02:11:24 executing program 4:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

[   61.025300][   T23] audit: type=1804 audit(1570241484.427:37): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir483738384/syzkaller.NmuyIv/6/bus" dev="sda1" ino=16571 res=1
02:11:24 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00')
r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xffff, 0x40000)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000180))
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7)
fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000002c0)=0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r8 = fcntl$dupfd(r1, 0x406, r0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000540)="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")
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r9, &(0x7f00000017c0), 0x1a4, 0x0)

02:11:24 executing program 5:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

02:11:24 executing program 0:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='gid=', @ANYRESHEX])

02:11:24 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '\xd0'}, {0x20, '-'}, {}, {0x20, 'md5sum'}, {0x20, '#! '}, {}]}, 0x1c)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=@v3={0x3000000, [{}, {0x7fffffff}], 0xee01}, 0x18, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[   61.295214][ T7580] hfs: invalid gid -1
[   61.303878][ T7580] hfs: unable to parse mount options
[   61.350947][ T7580] hfs: invalid gid -1
[   61.357249][ T7580] hfs: unable to parse mount options
[   61.384102][   T23] audit: type=1804 audit(1570241484.817:38): pid=7577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir720369867/syzkaller.Tx0qcY/8/bus" dev="sda1" ino=16555 res=1
[   61.507737][   T23] audit: type=1804 audit(1570241484.867:39): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir483738384/syzkaller.NmuyIv/7/bus" dev="sda1" ino=16575 res=1
02:11:25 executing program 4:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

02:11:25 executing program 0:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='gid=', @ANYRESHEX])

02:11:25 executing program 5:
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="04062fe0a63234976210d8a7a00b15"], 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

02:11:25 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00')
r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xffff, 0x40000)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000180))
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7)
fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000002c0)=0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r8 = fcntl$dupfd(r1, 0x406, r0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000540)="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")
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r9, &(0x7f00000017c0), 0x1a4, 0x0)

[   62.027641][ T7610] hfs: invalid gid -1
[   62.043782][ T7610] hfs: unable to parse mount options
[   62.061171][   T23] audit: type=1804 audit(1570241485.497:40): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir720369867/syzkaller.Tx0qcY/9/bus" dev="sda1" ino=16572 res=1
[   62.148420][   T23] audit: type=1804 audit(1570241485.557:41): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir483738384/syzkaller.NmuyIv/8/bus" dev="sda1" ino=16580 res=1
02:11:25 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x9)
pipe(&(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000440))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

02:11:25 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x9)
pipe(&(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000440))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

02:11:25 executing program 0:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='gid=', @ANYRESHEX])

02:11:25 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x9)
pipe(&(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000440))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[   62.501577][ T7624] hfs: invalid gid -1
[   62.505665][ T7624] hfs: unable to parse mount options
02:11:26 executing program 0:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='gid=', @ANYRESHEX])

02:11:26 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00')
r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xffff, 0x40000)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000180))
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7)
fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000002c0)=0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r8 = fcntl$dupfd(r1, 0x406, r0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000540)="eb1a8c6c20dfba9d51ff6485581a9f4fc753006f460e1be9fb7c56293f188528d7dcff06e9fd46fd5e6b6a13c4b555fda864f6569386901077d4cb9a3a3454c6481014973402125954aaec5a8fac5b4ff85569d6564571b1b44788482e97cf20b33abd87fee670a4e33d26cd8d81a995a47607be638dfef99c210a7a25227d4a4b773aadef457b23cb4acb085557704b37536f4a0b95bd20adbb07c7e4804e84f027c5eb9e1a459dd508028585052ae6272ead642c3cc5ec4bf8d4e5d4000a00e7496c59e057ad6d6fff1842bb534e01cf0d14a3652579685a77bd8e8b57a9f557fedb1b9001068df0530ffca469b5b2103e13d781c0708508f43abb15e16b288f57be1d819eb16d93bbaf0f32df25fe3f2060e62e95c9dcaf6d762d41f1ef13cba096cad9d41d51575c29699968436283fda4f0ff8cce21c3ab60173545089e81f3b36320fff4f4820fd919c15b866020a657a78ec7ea75531d3677c99074c0bf0531480ebd50817eecdce952e7f1a98c69b702de6766cffdfa30842da99011ac4057eee16b7e52ce9aaa9b1fbc15e0985197b055594332abf06f77c7b41f149cd0f2bfb4051835d910fc11ea3650e24e5566a850c923e8eee6b6d01efa6ed7b443ad0166502b660374d14fc0246a6e281b7a43440223fa5ee73436ece3231107a1522395e7aa0f31ec3f9804261074c0489ff7d5ec4ebe895cd9bfb04dc297b455e7a2b2608cb024400ed28e874d287d7b60a7c5386b028f13e7733e1760b9168444ed20118367a599d17be98ff9af12df6e7e54d2aeae464aa1c78d0fe7754b952f5e3a2894ce9e432173c25fa11695ccbd88a4c35c4db7dabddff96bc9727aac12788648643c75b7a38e9268e03b13c07577572aa74bfdd5151b02d810c8868c70a0ff2465c53a680ef53a83a63876a396ea74727cf5279934e5cf73835ef0ace9cbb367b297dd984bff232203176a06a6480526b7cc7d61582aa8b956041d0cdc648ec16e072614b34352c78f134ebc01118e6549c7880eeef6713d6fb5e663c96a88c025ee4529f08a8e5c2e5b6476eb5db9530757cb39b3241953ab009c85333d121a8923c68ce15ec4db33eac561b914df784cd7a9f926e3d298873572e9d440ff73a5da01a755a2c68d192fc72b28aa139979dedf62275dd3938450adedfaff805b5f9f025546463142c2f7b45f6db01eabae9dc2d9ff36552d88306d53ea3f275530f00867e9f0be1e690993db93410d502513aaebe5e47f817cabdcaa8a4e4b757cffa8273eaf84463b94c62a7c6f2ccd4628719b7f443a4221272b2a06b6ea6867ff0500b2f64156d4a304475477929edd06b51310148f97e3c21d9b4fb50655a735b9594bab129963e36dd40ebaccf5906b025699e1ece2d93c53a5aae37c0db7176233aa0db2871d07067d141ec3cbf2d1deb4a1b83ead")
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r9, &(0x7f00000017c0), 0x1a4, 0x0)

[   62.823513][ T7640] hfs: invalid gid -1
[   62.839791][ T7640] hfs: unable to parse mount options
02:11:26 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x9)
pipe(&(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000440))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[   63.062895][ T7634] ==================================================================
[   63.071135][ T7634] BUG: KCSAN: data-race in __splice_from_pipe / pipe_poll
[   63.078410][ T7634] 
[   63.080747][ T7634] write to 0xffff888103a52b78 of 4 bytes by task 7637 on cpu 1:
[   63.088820][ T7634]  __splice_from_pipe+0x3ce/0x480
[   63.093833][ T7634]  do_vmsplice.part.0+0x1c5/0x210
[   63.098931][ T7634]  __do_sys_vmsplice+0x15f/0x1c0
[   63.103857][ T7634]  __x64_sys_vmsplice+0x5e/0x80
[   63.108698][ T7634]  do_syscall_64+0xcf/0x2f0
[   63.113196][ T7634]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   63.119065][ T7634] 
[   63.121384][ T7634] read to 0xffff888103a52b78 of 4 bytes by task 7634 on cpu 0:
[   63.128913][ T7634]  pipe_poll+0x84/0x1d0
[   63.133064][ T7634]  do_select+0x7d0/0x1020
[   63.137390][ T7634]  core_sys_select+0x38b/0x520
[   63.142138][ T7634]  __x64_sys_pselect6+0x22a/0x280
[   63.147156][ T7634]  do_syscall_64+0xcf/0x2f0
[   63.151648][ T7634]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   63.157514][ T7634] 
[   63.159823][ T7634] Reported by Kernel Concurrency Sanitizer on:
[   63.165970][ T7634] CPU: 0 PID: 7634 Comm: syz-executor.5 Not tainted 5.3.0+ #0
[   63.173440][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   63.183484][ T7634] ==================================================================
[   63.191979][ T7634] Kernel panic - not syncing: panic_on_warn set ...
[   63.198554][ T7634] CPU: 0 PID: 7634 Comm: syz-executor.5 Not tainted 5.3.0+ #0
[   63.205989][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   63.216023][ T7634] Call Trace:
[   63.219405][ T7634]  dump_stack+0xf5/0x159
[   63.223641][ T7634]  panic+0x209/0x639
[   63.227529][ T7634]  ? vprintk_func+0x8d/0x140
[   63.232122][ T7634]  kcsan_report.cold+0x57/0xeb
[   63.236884][ T7634]  __kcsan_setup_watchpoint+0x342/0x500
[   63.242423][ T7634]  ? generic_pipe_buf_confirm+0x20/0x20
[   63.247956][ T7634]  __tsan_read4+0x2c/0x30
[   63.252273][ T7634]  pipe_poll+0x84/0x1d0
[   63.256418][ T7634]  ? generic_pipe_buf_confirm+0x20/0x20
[   63.261953][ T7634]  do_select+0x7d0/0x1020
[   63.266286][ T7634]  ? __sanitizer_cov_trace_switch+0x49/0x80
[   63.272178][ T7634]  ? set_fd_set.part.0+0x60/0x60
[   63.277106][ T7634]  ? set_fd_set.part.0+0x60/0x60
[   63.282041][ T7634]  ? set_fd_set.part.0+0x60/0x60
[   63.286970][ T7634]  ? set_fd_set.part.0+0x60/0x60
[   63.291895][ T7634]  ? set_fd_set.part.0+0x60/0x60
[   63.296822][ T7634]  ? set_fd_set.part.0+0x60/0x60
[   63.301751][ T7634]  ? drop_futex_key_refs.isra.0+0x5c/0xb0
[   63.307457][ T7634]  ? __tsan_read8+0x2c/0x30
[   63.311948][ T7634]  ? check_stack_object+0xda/0x110
[   63.317048][ T7634]  ? __tsan_read8+0x2c/0x30
[   63.321541][ T7634]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[   63.327768][ T7634]  core_sys_select+0x38b/0x520
[   63.332529][ T7634]  ? apic_timer_interrupt+0xa/0x20
[   63.337633][ T7634]  ? __tsan_read8+0x2c/0x30
[   63.342123][ T7634]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[   63.347918][ T7634]  __x64_sys_pselect6+0x22a/0x280
[   63.352927][ T7634]  ? __tsan_read8+0x2c/0x30
[   63.357433][ T7634]  do_syscall_64+0xcf/0x2f0
[   63.361930][ T7634]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   63.367804][ T7634] RIP: 0033:0x459a59
[   63.371689][ T7634] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   63.391275][ T7634] RSP: 002b:00007f5d52021c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[   63.399670][ T7634] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a59
[   63.407630][ T7634] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040
[   63.415586][ T7634] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[   63.423540][ T7634] R10: 0000000020000140 R11: 0000000000000246 R12: 00007f5d520226d4
[   63.431503][ T7634] R13: 00000000004c6fd9 R14: 00000000004dc720 R15: 00000000ffffffff
[   63.441060][ T7634] Kernel Offset: disabled
[   63.445663][ T7634] Rebooting in 86400 seconds..