[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 86.779951][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 86.779966][ T27] audit: type=1400 audit(1576927624.220:41): avc: denied { map } for pid=9798 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.6' (ECDSA) to the list of known hosts. 2019/12/21 11:27:10 fuzzer started [ 93.438426][ T27] audit: type=1400 audit(1576927630.880:42): avc: denied { map } for pid=9807 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/12/21 11:27:12 dialing manager at 10.128.0.26:43281 2019/12/21 11:27:12 syscalls: 2706 2019/12/21 11:27:12 code coverage: enabled 2019/12/21 11:27:12 comparison tracing: enabled 2019/12/21 11:27:12 extra coverage: enabled 2019/12/21 11:27:12 setuid sandbox: enabled 2019/12/21 11:27:12 namespace sandbox: enabled 2019/12/21 11:27:12 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/21 11:27:12 fault injection: enabled 2019/12/21 11:27:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/21 11:27:12 net packet injection: enabled 2019/12/21 11:27:12 net device setup: enabled 2019/12/21 11:27:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/21 11:27:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:29:43 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 246.257395][ T27] audit: type=1400 audit(1576927783.700:43): avc: denied { map } for pid=9822 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22184 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 11:29:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 246.448837][ T9823] IPVS: ftp: loaded support on port[0] = 21 [ 246.662861][ T9826] IPVS: ftp: loaded support on port[0] = 21 [ 246.688515][ T9823] chnl_net:caif_netlink_parms(): no params data found 11:29:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 246.769614][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.794221][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.802531][ T9823] device bridge_slave_0 entered promiscuous mode [ 246.826924][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.844162][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.852354][ T9823] device bridge_slave_1 entered promiscuous mode [ 246.927419][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.947433][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.027614][ T9826] chnl_net:caif_netlink_parms(): no params data found [ 247.037004][ T9828] IPVS: ftp: loaded support on port[0] = 21 [ 247.055069][ T9823] team0: Port device team_slave_0 added [ 247.086381][ T9823] team0: Port device team_slave_1 added 11:29:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc33", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 247.149509][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.157497][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.165822][ T9826] device bridge_slave_0 entered promiscuous mode [ 247.217948][ T9823] device hsr_slave_0 entered promiscuous mode 11:29:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) [ 247.336795][ T9823] device hsr_slave_1 entered promiscuous mode [ 247.399427][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.411738][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.435076][ T9826] device bridge_slave_1 entered promiscuous mode [ 247.517128][ T9831] IPVS: ftp: loaded support on port[0] = 21 [ 247.523424][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.548098][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.589056][ T9823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.594457][ T27] audit: type=1400 audit(1576927785.030:44): avc: denied { create } for pid=9823 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 247.664110][ T27] audit: type=1400 audit(1576927785.030:45): avc: denied { write } for pid=9823 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 247.691247][ T27] audit: type=1400 audit(1576927785.030:46): avc: denied { read } for pid=9823 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 11:29:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x7843c471) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1fa0}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x15000000}, 0x100) [ 247.780304][ T9823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.848458][ T9823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.906277][ T9833] IPVS: ftp: loaded support on port[0] = 21 [ 247.914921][ T9826] team0: Port device team_slave_0 added [ 247.932562][ T9823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.965522][ T9826] team0: Port device team_slave_1 added [ 248.028557][ T9835] IPVS: ftp: loaded support on port[0] = 21 [ 248.086050][ T9826] device hsr_slave_0 entered promiscuous mode [ 248.125320][ T9826] device hsr_slave_1 entered promiscuous mode [ 248.174206][ T9826] debugfs: Directory 'hsr0' with parent '/' already present! [ 248.212471][ T9828] chnl_net:caif_netlink_parms(): no params data found [ 248.376794][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.383897][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.393005][ T9828] device bridge_slave_0 entered promiscuous mode [ 248.411107][ T9826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.468600][ T9826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.528712][ T9826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.588601][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.595800][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.603501][ T9828] device bridge_slave_1 entered promiscuous mode [ 248.629429][ T9826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.677042][ T9833] chnl_net:caif_netlink_parms(): no params data found [ 248.687446][ T9831] chnl_net:caif_netlink_parms(): no params data found [ 248.698258][ T9828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.711783][ T9828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.756185][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.797261][ T9828] team0: Port device team_slave_0 added [ 248.839040][ T9828] team0: Port device team_slave_1 added [ 248.888226][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.895683][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.903378][ T9833] device bridge_slave_0 entered promiscuous mode [ 248.912048][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.919313][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.927616][ T9831] device bridge_slave_0 entered promiscuous mode [ 248.960964][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.970221][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.979613][ T9833] device bridge_slave_1 entered promiscuous mode [ 248.999181][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.006346][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.014149][ T9831] device bridge_slave_1 entered promiscuous mode [ 249.021009][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.030316][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.041622][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.049736][ T9835] chnl_net:caif_netlink_parms(): no params data found [ 249.117512][ T9828] device hsr_slave_0 entered promiscuous mode [ 249.154444][ T9828] device hsr_slave_1 entered promiscuous mode [ 249.204134][ T9828] debugfs: Directory 'hsr0' with parent '/' already present! [ 249.215773][ T9833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.247529][ T9833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.284353][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.293061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.302087][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.309337][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.319848][ T9831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.338997][ T9831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.357201][ T9833] team0: Port device team_slave_0 added [ 249.372275][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.380842][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.389842][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.398359][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.405457][ T9839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.447361][ T9833] team0: Port device team_slave_1 added [ 249.457221][ T9831] team0: Port device team_slave_0 added [ 249.469670][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.480132][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.527381][ T9831] team0: Port device team_slave_1 added [ 249.549440][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.557392][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.565913][ T9835] device bridge_slave_0 entered promiscuous mode [ 249.578893][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.587932][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.596433][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.605315][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.613881][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.623080][ T9828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.676826][ T9828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.757104][ T9833] device hsr_slave_0 entered promiscuous mode [ 249.794471][ T9833] device hsr_slave_1 entered promiscuous mode [ 249.834099][ T9833] debugfs: Directory 'hsr0' with parent '/' already present! [ 249.842939][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.850622][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.858577][ T9835] device bridge_slave_1 entered promiscuous mode [ 249.875098][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.883266][ T9828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.930223][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.939168][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.947715][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.956286][ T3012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.997660][ T9835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.010092][ T9828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.057475][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.111007][ T9831] device hsr_slave_0 entered promiscuous mode [ 250.154424][ T9831] device hsr_slave_1 entered promiscuous mode [ 250.204371][ T9831] debugfs: Directory 'hsr0' with parent '/' already present! [ 250.213446][ T9835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.245445][ T9835] team0: Port device team_slave_0 added [ 250.269978][ T9833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.317606][ T9835] team0: Port device team_slave_1 added [ 250.328153][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.336595][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.354318][ T9833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.397927][ T9833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.459410][ T9826] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.472928][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.481150][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.488950][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.517945][ T9833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.576677][ T27] audit: type=1400 audit(1576927788.020:47): avc: denied { associate } for pid=9823 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 250.636644][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.645658][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.654099][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.661196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.669188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.681840][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.690385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.697443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.757668][ T9835] device hsr_slave_0 entered promiscuous mode [ 250.804581][ T9835] device hsr_slave_1 entered promiscuous mode [ 250.844463][ T9835] debugfs: Directory 'hsr0' with parent '/' already present! [ 250.852063][ T9831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.930472][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.975154][ T9846] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 250.977887][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.007595][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.034074][ T9831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.049143][ T27] audit: type=1400 audit(1576927788.490:48): avc: denied { open } for pid=9845 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 251.073112][ T27] audit: type=1400 audit(1576927788.490:49): avc: denied { kernel } for pid=9845 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 251.109820][ T9831] netdevsim netdevsim3 netdevsim2: renamed from eth2 11:29:48 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x2) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x81004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x90) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0xc8, @dev={0xfe, 0x80, [], 0x14}}, {0xa, 0x4e24, 0x1f, @remote, 0x1ff}, 0x2, [0x8, 0x7, 0x0, 0x7, 0xffff, 0xff, 0x7fff, 0xfffffff7]}, 0x5c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mremap(&(0x7f0000953000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) connect$vsock_stream(r2, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) msync(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x5) [ 251.186052][ T9831] netdevsim netdevsim3 netdevsim3: renamed from eth3 11:29:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x10, 0x2, 0x81}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000100)=0x8) gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') [ 251.247097][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.263344][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.311181][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.356963][ T9835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.380017][ T9835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.436340][ T9835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.471603][ T9835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.527691][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.538216][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.547387][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.557321][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.570502][ T9826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.583193][ T9826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.597916][ T9828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.616033][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.627368][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.702499][ T9828] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.721567][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.730122][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.738466][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 11:29:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x200080002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="26010000100001042bbd70810000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000000210003000000"], 0x44}}, 0x80004) [ 251.747659][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.763076][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.784263][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.792977][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 11:29:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xdcf7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) [ 251.825114][ T3749] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.832202][ T3749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.851966][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.860767][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.882132][ T3749] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.889267][ T3749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.893136][ C0] hrtimer: interrupt took 33127 ns [ 251.920407][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.952166][ T9833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.975634][ T9831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.982943][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:29:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setpgid(0x0, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x3e1165ae3eb1f51c}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0xcdeae7c38004c67f, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x40000) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r5, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r6 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x8001007, 0x7, 0x1}) recvfrom$netrom(r4, &(0x7f0000000100)=""/71, 0x47, 0x10000, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x28, 0x3, r4}) [ 252.080968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.096016][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.115001][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.138303][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.148024][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.156916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.165711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.174459][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.182341][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.207094][ T9833] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.228846][ T9828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.249866][ T9828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.280840][ T9835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.301617][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.330527][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.361880][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.371072][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.383227][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.421615][ T9831] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.443463][ T9828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.456341][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.465400][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.473689][ T3749] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.480812][ T3749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.489997][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.499466][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.507930][ T3749] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.515034][ T3749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.515533][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.531963][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.546578][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.559885][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 11:29:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000100000000000000700000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) [ 252.571492][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.583482][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.602430][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.610726][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.632677][ T9835] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.680078][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.692763][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.706341][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.722489][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.731171][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.741821][ T9881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9881 comm=syz-executor.0 [ 252.757290][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.765865][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.772920][ T9843] bridge0: port 1(bridge_slave_0) entered forwarding state 11:29:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@mcast1, @in=@rand_addr=0xfffffffd, 0x4e20, 0x0, 0x0, 0x2, 0x14, 0x0, 0x30}, {0x0, 0x0, 0x7d, 0x0, 0x5d32, 0x9, 0x6, 0x5}, {0x1e, 0xfffffffffffffff9, 0x0, 0x7}, 0x1, 0x6e6bbf, 0x0, 0x3}, {{@in, 0x0, 0xff}, 0x0, @in=@multicast1, 0x0, 0x4, 0x2, 0x0, 0xb3}}, 0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30f03c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28) [ 252.781175][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.790049][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.804518][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.811609][ T9843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.831230][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.842241][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.851429][ T27] audit: type=1400 audit(1576927790.290:50): avc: denied { prog_load } for pid=9883 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 252.859605][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.918956][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.933446][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.961633][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.984179][ T27] audit: type=1400 audit(1576927790.420:51): avc: denied { prog_run } for pid=9883 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 252.985216][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.042015][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.051898][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.063684][ T9833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.118611][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.132339][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.159667][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.191069][ T3749] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.198218][ T3749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.212627][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.221671][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.237077][ T3749] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.244196][ T3749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.255537][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.264918][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.273333][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.281796][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.290005][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.298460][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.320762][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.328857][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.337830][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.346673][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.355789][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.372081][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.381698][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.398904][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.412294][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.421697][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.429345][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.437144][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.445639][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.461286][ T9835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.474421][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.483709][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.492899][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.511842][ T9831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.527849][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.535496][ T9843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.547176][ T9833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.605895][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.613394][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.627840][ T9835] 8021q: adding VLAN 0 to HW filter on device batadv0 11:29:52 executing program 2: unshare(0x20600) socketpair(0x10, 0x4, 0xc0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x322}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x80000000, @remote, 0x2}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x1b4}, @in6={0xa, 0x4e20, 0x8001, @mcast1, 0x9}, @in={0x2, 0x4e24, @rand_addr=0xda}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x6ed, @mcast1, 0x1}, @in6={0xa, 0x4e23, 0x7, @remote, 0x1}], 0xe8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000280)="b68c36f4c8a8be48a59ab328a243772d0c8e23b777bb23df2016408a7619cd36b45d48c1202d34890c5dd32194b31b19d0e0df5cb578dae6a2ce9e", &(0x7f0000000300)=""/248) wait4(0x0, 0x0, 0x80000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x68e95d3f62e61fce, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!\x10\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) poll(0x0, 0x0, 0x6) 11:29:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) [ 255.152235][ T27] audit: type=1400 audit(1576927792.580:52): avc: denied { create } for pid=9925 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 255.190709][ T9929] block nbd1: shutting down sockets [ 255.191832][ T27] audit: type=1400 audit(1576927792.590:53): avc: denied { ioctl } for pid=9925 comm="syz-executor.2" path="socket:[38352]" dev="sockfs" ino=38352 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 255.235646][ T9927] block nbd1: shutting down sockets [ 255.260878][ T9926] bond0: (slave bond_slave_1): Releasing backup interface [ 255.619593][ T9930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:29:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000100)={'bond0\x00', @ifru_flags=0x200}) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r2 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_ifreq(r2, 0x8922, &(0x7f00000014c0)={'bond0\x00', @ifru_flags=0x6dbbce78125ac468}) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xec4e0a8482a573ea) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x10000, 0x0) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x70, 0x1, 0x8}, 0x5}}, 0x18) 11:29:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x401}) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x3f, 0x20000) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xdfe020b593f51076, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000140)=0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) accept(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000480)=[0x8, 0xffffff80, 0xe0, 0xffff5218, 0x9, 0x3ff, 0x80000000], &(0x7f0000000280)}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x40010, r7, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 11:29:54 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x58f5}, 0x0, 0x0, 0x0, 0xd1c32f2d295575f8, 0x0, 0x7d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) sched_setscheduler(r5, 0x6, &(0x7f0000000080)=0x27) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x299, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) preadv(r4, &(0x7f0000001380), 0x10000000000000a3, 0x4) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000500)={0x80201000, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0xd}, &(0x7f00000003c0)=""/152, 0x98, &(0x7f0000000480)=""/80, &(0x7f0000000340)=[r6, r0, r7], 0x3}, 0x50) r9 = syz_open_procfs(r8, &(0x7f00000001c0)='ne\xaa\xf3\xc1\x15\xf6t\xe04\a\xba\xda\x94\xb0\xfc$\xc0\xce\x9a\\jdOI\x04#xI#q\xe6\xb4\xd9\b\xfb\x81\xb1\xf0\xe4q\x0f@\xbdo\xce\f\xc3>\x98\xca\xa6\x86Z6\xab\x1b\x94\xe0\xbf\xecSi\x1b4\xc6\x85b\x9aJf\xa3\xdeZ\xac\x91)@\xb5\x94l\xe3\xe7\xc2\x89s\x93X\xaf\x8eE+\xbe\t\x9a\x96&c\xb4\x89E5\xad\x1f\x8d\xb9\xd6\x9aE\x89\x93?g\xba\xea\xe1\x8dJ\xe2\xc9\xaab\xc5\x8e\x95]\xb8\x9a\xcc\xb4\x83\xd9\xf9\x8c-\xca\xf5b4\x9b\xda\x90\x15\x91\xdev\xc0\a\xf5\xa5\x04_\x99TPz\x0f)w_\x83\x90h\\:K\xc4 \xe2\xbb\f\xdd\x02\xffd\xf4\xf0\x00\x00\x00\x00\xb3\x81XI\xaa\x7fJ\xa2\x89I1\xd7\t+\x1f\xf4\xb6h\xc3\xd50[~W\xe0PCsO\x92\x9e\f\xab\xe4S:9\xedLu5L\xc4\x91\xfb%z\xea\x19\xe8\xd3\xb0\xcfG\xd7\x04') r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000000)=0xd000) preadv(r9, &(0x7f0000000a40)=[{&(0x7f0000000ac0)=""/12}, {&(0x7f0000000680)=""/149}, {&(0x7f0000000740)=""/88}, {&(0x7f00000007c0)=""/59}, {&(0x7f0000000800)=""/209, 0xffffffffffffffce}, {&(0x7f0000000900)=""/193}, {&(0x7f0000000a00)=""/36}], 0x100000000000050a, 0x9b) r11 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r11, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r12 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x8000fffffffe) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000012c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000040)={r13}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r14, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x80000000}, @timestamp, @window={0x3, 0x40, 0x42a}, @timestamp], 0x4) 11:29:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 11:29:54 executing program 2: unshare(0x20600) socketpair(0x10, 0x4, 0xc0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x322}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x80000000, @remote, 0x2}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x1b4}, @in6={0xa, 0x4e20, 0x8001, @mcast1, 0x9}, @in={0x2, 0x4e24, @rand_addr=0xda}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x6ed, @mcast1, 0x1}, @in6={0xa, 0x4e23, 0x7, @remote, 0x1}], 0xe8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000280)="b68c36f4c8a8be48a59ab328a243772d0c8e23b777bb23df2016408a7619cd36b45d48c1202d34890c5dd32194b31b19d0e0df5cb578dae6a2ce9e", &(0x7f0000000300)=""/248) wait4(0x0, 0x0, 0x80000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x68e95d3f62e61fce, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!\x10\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) poll(0x0, 0x0, 0x6) 11:29:54 executing program 3: clone(0x1000080000611, &(0x7f00000000c0), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000723efa32bc0059b1f283000000040000001c00010008000100020000400800050000002000"], 0x28}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x12c3d6b8473c86d8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x240000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x566}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) [ 256.734623][ T9939] block nbd1: shutting down sockets [ 256.757845][ T27] audit: type=1804 audit(1576927794.200:54): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/1/bus" dev="sda1" ino=16527 res=1 [ 256.899900][ T27] audit: type=1400 audit(1576927794.330:55): avc: denied { write } for pid=9937 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 11:29:54 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x81, 0x0, &(0x7f0000000040)=0x7}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/52) lstat(0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x299, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) write$apparmor_current(r4, &(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r9, @ANYRES64, @ANYRES32=r13, @ANYRES16, @ANYRESHEX]], 0x1) r14 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r4, r14, 0x0, 0x8000fffffffe) r15 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r16, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}, {@noextend='noextend'}], [{@euid_eq={'euid', 0x3d, r16}}, {@hash='hash'}, {@hash='hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'hash\x00'}}]}}) r17 = syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r18 = accept4$alg(r3, 0x0, 0x0, 0x0) sendfile(r18, r17, 0x0, 0x37) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r17, 0xc0405519, &(0x7f0000000180)={0x9, 0x6, 0x3, 0xff, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00D\x02\xc4\x19%~\xe9l\x00', 0x6}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x576, 0x38b) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0xa000000) [ 256.975711][ T9949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pig=9949 comm=syz-executor.3 [ 257.048302][ T27] audit: type=1804 audit(1576927794.480:56): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/1/bus" dev="sda1" ino=16527 res=1 [ 257.121043][ T27] audit: type=1804 audit(1576927794.530:57): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir984385497/syzkaller.eDk743/8/bus" dev="sda1" ino=16539 res=1 [ 257.150590][ T9958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pig=9958 comm=syz-executor.3 [ 257.254733][ T9942] bond0: (slave bond_slave_1): Releasing backup interface 11:29:54 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x8, 0x80000001, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = inotify_init() inotify_rm_watch(r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0xfffffffffffffe44) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000294}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16, @ANYRESOCT=r1, @ANYPTR=&(0x7f0000000300)=ANY=[]], 0x4}, 0x1, 0x0, 0x0, 0x20040800}, 0x24001040) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="0300004a00f000200016bdc6444f8e4dc17192c2aabee69204e80c5c1ecbe004722a58463bb4d701adbd888f3419f025df665a7f9d93f5b7de350000a215fc307f084e3e168754e519b9fafef6ffffffffffffca1ca1669144a04d93dec31aa9703265eb66fbbdb19f2170d0f92fed148ad57dd90423994aabf44444"], 0xa) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="8c6afbc18295209d3afd2fdfa79f0b5dff7fa7f9745afe84b0e3064767e50f60a2d6b11d85967d31afaed05441e3605647bc0e7e209596824ddcf166c92999088280229a0ff4f172a00ccb4ac0965ad1e16ce1b3731291c1342e6b7a84285c2ce01ff376", 0x64, 0x0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x127, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 257.439330][ T27] audit: type=1804 audit(1576927794.880:58): pid=9950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/1/bus" dev="sda1" ino=16527 res=1 [ 257.599411][ T27] audit: type=1804 audit(1576927795.040:59): pid=9950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/1/bus" dev="sda1" ino=16527 res=1 11:29:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x401}) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x3f, 0x20000) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xdfe020b593f51076, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000140)=0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) accept(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000480)=[0x8, 0xffffff80, 0xe0, 0xffff5218, 0x9, 0x3ff, 0x80000000], &(0x7f0000000280)}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x40010, r7, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 11:29:55 executing program 2: unshare(0x20600) socketpair(0x10, 0x4, 0xc0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x322}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x80000000, @remote, 0x2}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x1b4}, @in6={0xa, 0x4e20, 0x8001, @mcast1, 0x9}, @in={0x2, 0x4e24, @rand_addr=0xda}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x6ed, @mcast1, 0x1}, @in6={0xa, 0x4e23, 0x7, @remote, 0x1}], 0xe8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000280)="b68c36f4c8a8be48a59ab328a243772d0c8e23b777bb23df2016408a7619cd36b45d48c1202d34890c5dd32194b31b19d0e0df5cb578dae6a2ce9e", &(0x7f0000000300)=""/248) wait4(0x0, 0x0, 0x80000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x68e95d3f62e61fce, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!\x10\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) poll(0x0, 0x0, 0x6) [ 257.976870][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 257.976887][ T27] audit: type=1804 audit(1576927795.420:62): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/2/bus" dev="sda1" ino=16548 res=1 11:29:55 executing program 0: ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000300)={{0x0, 0x0, @reserved="328d5f03b0078fec9f360e085364b463d1e808fbecad857488cd9c4c0c2fe0a5"}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x20000, 0x0) [ 258.166620][ T27] audit: type=1804 audit(1576927795.530:63): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/2/bus" dev="sda1" ino=16548 res=1 11:29:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x401}) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x3f, 0x20000) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xdfe020b593f51076, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000140)=0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) accept(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000480)=[0x8, 0xffffff80, 0xe0, 0xffff5218, 0x9, 0x3ff, 0x80000000], &(0x7f0000000280)}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x40010, r7, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 11:29:55 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x8, 0x80000001, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = inotify_init() inotify_rm_watch(r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0xfffffffffffffe44) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000294}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16, @ANYRESOCT=r1, @ANYPTR=&(0x7f0000000300)=ANY=[]], 0x4}, 0x1, 0x0, 0x0, 0x20040800}, 0x24001040) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="0300004a00f000200016bdc6444f8e4dc17192c2aabee69204e80c5c1ecbe004722a58463bb4d701adbd888f3419f025df665a7f9d93f5b7de350000a215fc307f084e3e168754e519b9fafef6ffffffffffffca1ca1669144a04d93dec31aa9703265eb66fbbdb19f2170d0f92fed148ad57dd90423994aabf44444"], 0xa) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="8c6afbc18295209d3afd2fdfa79f0b5dff7fa7f9745afe84b0e3064767e50f60a2d6b11d85967d31afaed05441e3605647bc0e7e209596824ddcf166c92999088280229a0ff4f172a00ccb4ac0965ad1e16ce1b3731291c1342e6b7a84285c2ce01ff376", 0x64, 0x0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x127, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 258.301321][ T9980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:29:56 executing program 2: unshare(0x20600) socketpair(0x10, 0x4, 0xc0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x322}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x80000000, @remote, 0x2}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x1b4}, @in6={0xa, 0x4e20, 0x8001, @mcast1, 0x9}, @in={0x2, 0x4e24, @rand_addr=0xda}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x6ed, @mcast1, 0x1}, @in6={0xa, 0x4e23, 0x7, @remote, 0x1}], 0xe8) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000280)="b68c36f4c8a8be48a59ab328a243772d0c8e23b777bb23df2016408a7619cd36b45d48c1202d34890c5dd32194b31b19d0e0df5cb578dae6a2ce9e", &(0x7f0000000300)=""/248) wait4(0x0, 0x0, 0x80000000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x68e95d3f62e61fce, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!\x10\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) poll(0x0, 0x0, 0x6) [ 258.480418][ T27] audit: type=1804 audit(1576927795.920:64): pid=9976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/3/bus" dev="sda1" ino=16541 res=1 11:29:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) getpeername$packet(r2, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x80000000000, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000740)={0x2000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000000680)=""/147, &(0x7f0000000280)=[r6], 0x1}, 0x50) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x2060, &(0x7f0000000440)=ANY=[@ANYBLOB="439969b0d0de34d732c19c47b29f433ef0d93ed089a4ce909fd192906953f532ddb0fa1c02a22b9856e5a45cbdb3720346da9a502899036b5208000000000000006dc7738dce9b62bcd3c37fd04fe97f689d4fc103af1ab23f7e1843f21219e1fdf78b3384aa25bc5f2c0f872b63fb044943f20439fe85a7578359cc49a269b7eacd022cc95090d329eca7603b4b3bab41c0ddbd7ddfb84aee8b2ade12c42d310ed46618707066bb9de5b025a74b707f1ae7796e49f4478902131d558971cdead262fc456995d827410000ca97b2408b", @ANYBLOB="c37dfa8c3a3d93e1ae14d882322507ca15aa2acc3655332d434713dc363393f9390726757ff4d2eb0ca027686a792aa8cc87c63987b531d674e10e32c5675c0a2cd70d284ef397d3220064bdd1ae70c0ed60db63652f5fd2e6f6f841c866d397b1def55421733d9da66f6c5078f038b4fcb584ec7c417afe19a58e7592aef5a534a264eb4543a453732f2098faf37360568e93efb208ed9bbabe041d37b8f6b9ac8401ec1d87538029fdd5e4a3599947aa2d774d4906b6cafcb91fafefec", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x272) creat(&(0x7f0000000300)='./bus\x00', 0x0) [ 258.643705][ T27] audit: type=1804 audit(1576927795.970:65): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/3/bus" dev="sda1" ino=16553 res=1 [ 258.744124][ T9961] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:29:56 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x8, 0x80000001, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = inotify_init() inotify_rm_watch(r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0xfffffffffffffe44) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000294}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16, @ANYRESOCT=r1, @ANYPTR=&(0x7f0000000300)=ANY=[]], 0x4}, 0x1, 0x0, 0x0, 0x20040800}, 0x24001040) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="0300004a00f000200016bdc6444f8e4dc17192c2aabee69204e80c5c1ecbe004722a58463bb4d701adbd888f3419f025df665a7f9d93f5b7de350000a215fc307f084e3e168754e519b9fafef6ffffffffffffca1ca1669144a04d93dec31aa9703265eb66fbbdb19f2170d0f92fed148ad57dd90423994aabf44444"], 0xa) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="8c6afbc18295209d3afd2fdfa79f0b5dff7fa7f9745afe84b0e3064767e50f60a2d6b11d85967d31afaed05441e3605647bc0e7e209596824ddcf166c92999088280229a0ff4f172a00ccb4ac0965ad1e16ce1b3731291c1342e6b7a84285c2ce01ff376", 0x64, 0x0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x127, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 258.827449][ T27] audit: type=1804 audit(1576927796.240:66): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/3/bus" dev="sda1" ino=16553 res=1 [ 258.829096][T10003] bond0: (slave bond_slave_1): Releasing backup interface [ 258.984832][ T9961] syz-executor.1 (9961) used greatest stack depth: 22680 bytes left 11:29:56 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x81, 0x0, &(0x7f0000000040)=0x7}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/52) lstat(0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x299, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) write$apparmor_current(r4, &(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r9, @ANYRES64, @ANYRES32=r13, @ANYRES16, @ANYRESHEX]], 0x1) r14 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r4, r14, 0x0, 0x8000fffffffe) r15 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r16, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}, {@noextend='noextend'}], [{@euid_eq={'euid', 0x3d, r16}}, {@hash='hash'}, {@hash='hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'hash\x00'}}]}}) r17 = syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r18 = accept4$alg(r3, 0x0, 0x0, 0x0) sendfile(r18, r17, 0x0, 0x37) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r17, 0xc0405519, &(0x7f0000000180)={0x9, 0x6, 0x3, 0xff, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00D\x02\xc4\x19%~\xe9l\x00', 0x6}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x576, 0x38b) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0xa000000) 11:29:56 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x8, 0x80000001, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = inotify_init() inotify_rm_watch(r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0xfffffffffffffe44) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000294}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16, @ANYRESOCT=r1, @ANYPTR=&(0x7f0000000300)=ANY=[]], 0x4}, 0x1, 0x0, 0x0, 0x20040800}, 0x24001040) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="0300004a00f000200016bdc6444f8e4dc17192c2aabee69204e80c5c1ecbe004722a58463bb4d701adbd888f3419f025df665a7f9d93f5b7de350000a215fc307f084e3e168754e519b9fafef6ffffffffffffca1ca1669144a04d93dec31aa9703265eb66fbbdb19f2170d0f92fed148ad57dd90423994aabf44444"], 0xa) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="8c6afbc18295209d3afd2fdfa79f0b5dff7fa7f9745afe84b0e3064767e50f60a2d6b11d85967d31afaed05441e3605647bc0e7e209596824ddcf166c92999088280229a0ff4f172a00ccb4ac0965ad1e16ce1b3731291c1342e6b7a84285c2ce01ff376", 0x64, 0x0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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", 0x127, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 11:29:57 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x401}) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x3f, 0x20000) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xdfe020b593f51076, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000140)=0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) accept(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000480)=[0x8, 0xffffff80, 0xe0, 0xffff5218, 0x9, 0x3ff, 0x80000000], &(0x7f0000000280)}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x20) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x40010, r7, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 11:29:57 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x81, 0x0, &(0x7f0000000040)=0x7}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/52) lstat(0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x299, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r13, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) write$apparmor_current(r4, &(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r9, @ANYRES64, @ANYRES32=r13, @ANYRES16, @ANYRESHEX]], 0x1) r14 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r4, r14, 0x0, 0x8000fffffffe) r15 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r16, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}, {@noextend='noextend'}], [{@euid_eq={'euid', 0x3d, r16}}, {@hash='hash'}, {@hash='hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'hash\x00'}}]}}) r17 = syz_open_procfs(0x0, &(0x7f0000270ff2)='net/fib_trie\x00') bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r18 = accept4$alg(r3, 0x0, 0x0, 0x0) sendfile(r18, r17, 0x0, 0x37) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r17, 0xc0405519, &(0x7f0000000180)={0x9, 0x6, 0x3, 0xff, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00D\x02\xc4\x19%~\xe9l\x00', 0x6}) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x576, 0x38b) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0xa000000) [ 260.002707][ T27] audit: type=1804 audit(1576927797.440:67): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/4/bus" dev="sda1" ino=16562 res=1 [ 260.259336][ T27] audit: type=1804 audit(1576927797.680:68): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/4/bus" dev="sda1" ino=16562 res=1 [ 260.390521][ T27] audit: type=1804 audit(1576927797.830:69): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir339427724/syzkaller.tzPaGZ/6/bus" dev="sda1" ino=16563 res=1 11:29:58 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) getpeername$packet(r2, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x80000000000, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000740)={0x2000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000000680)=""/147, &(0x7f0000000280)=[r6], 0x1}, 0x50) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x2060, &(0x7f0000000440)=ANY=[@ANYBLOB="439969b0d0de34d732c19c47b29f433ef0d93ed089a4ce909fd192906953f532ddb0fa1c02a22b9856e5a45cbdb3720346da9a502899036b5208000000000000006dc7738dce9b62bcd3c37fd04fe97f689d4fc103af1ab23f7e1843f21219e1fdf78b3384aa25bc5f2c0f872b63fb044943f20439fe85a7578359cc49a269b7eacd022cc95090d329eca7603b4b3bab41c0ddbd7ddfb84aee8b2ade12c42d310ed46618707066bb9de5b025a74b707f1ae7796e49f4478902131d558971cdead262fc456995d827410000ca97b2408b", @ANYBLOB="c37dfa8c3a3d93e1ae14d882322507ca15aa2acc3655332d434713dc363393f9390726757ff4d2eb0ca027686a792aa8cc87c63987b531d674e10e32c5675c0a2cd70d284ef397d3220064bdd1ae70c0ed60db63652f5fd2e6f6f841c866d397b1def55421733d9da66f6c5078f038b4fcb584ec7c417afe19a58e7592aef5a534a264eb4543a453732f2098faf37360568e93efb208ed9bbabe041d37b8f6b9ac8401ec1d87538029fdd5e4a3599947aa2d774d4906b6cafcb91fafefec", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x272) creat(&(0x7f0000000300)='./bus\x00', 0x0) 11:29:58 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) getpeername$packet(r2, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x80000000000, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000740)={0x2000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000000680)=""/147, &(0x7f0000000280)=[r6], 0x1}, 0x50) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x2060, &(0x7f0000000440)=ANY=[@ANYBLOB="439969b0d0de34d732c19c47b29f433ef0d93ed089a4ce909fd192906953f532ddb0fa1c02a22b9856e5a45cbdb3720346da9a502899036b5208000000000000006dc7738dce9b62bcd3c37fd04fe97f689d4fc103af1ab23f7e1843f21219e1fdf78b3384aa25bc5f2c0f872b63fb044943f20439fe85a7578359cc49a269b7eacd022cc95090d329eca7603b4b3bab41c0ddbd7ddfb84aee8b2ade12c42d310ed46618707066bb9de5b025a74b707f1ae7796e49f4478902131d558971cdead262fc456995d827410000ca97b2408b", @ANYBLOB="c37dfa8c3a3d93e1ae14d882322507ca15aa2acc3655332d434713dc363393f9390726757ff4d2eb0ca027686a792aa8cc87c63987b531d674e10e32c5675c0a2cd70d284ef397d3220064bdd1ae70c0ed60db63652f5fd2e6f6f841c866d397b1def55421733d9da66f6c5078f038b4fcb584ec7c417afe19a58e7592aef5a534a264eb4543a453732f2098faf37360568e93efb208ed9bbabe041d37b8f6b9ac8401ec1d87538029fdd5e4a3599947aa2d774d4906b6cafcb91fafefec", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x272) creat(&(0x7f0000000300)='./bus\x00', 0x0) [ 260.898086][ T27] audit: type=1804 audit(1576927798.340:70): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/4/bus" dev="sda1" ino=16541 res=1 [ 261.015411][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 261.022255][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 261.865940][T10034] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:29:59 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000280)={0x5, 0x0, [], {0x0, @reserved}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r7, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r8 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8000fffffffe) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f0000000340)=0x5) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = dup3(r4, r5, 0x0) dup2(r9, r6) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x11b000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r10, 0x806c4120, &(0x7f0000000040)) r11 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r11, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r12 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x8000fffffffe) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0xddd9231ecf13e870}, 0x48000) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='v\xfc\xff\xa2\x00\x00\x00\x03\xff', 0x4002, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) lseek(r14, 0x5, 0x3) 11:30:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000012c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, &(0x7f0000000100)=@ax25={{0x3, @null}, [@rose, @default, @default, @null, @remote, @rose, @default, @null]}, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) [ 262.685709][ T27] audit: type=1804 audit(1576927800.130:71): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/5/bus" dev="sda1" ino=16565 res=1 11:30:00 executing program 4: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x20000) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x1, 0x0, {0x101, 0x2ab6, 0x2003, 0x0, 0x9, 0x6, 0x3, 0x5}}) r3 = socket(0x1, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000200)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000600)='/dev/midi#\x00', 0xffffffffffffffd3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 263.002225][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 263.002242][ T27] audit: type=1804 audit(1576927800.430:75): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/5/bus" dev="sda1" ino=16565 res=1 11:30:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) bind$unix(r2, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="99267900", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x3, 0x1, 0xbd73e9e510448771, 0x4, 0x8, 0x7ff, 0x5, 0x6, r4}, 0x20) prctl$PR_SET_ENDIAN(0x14, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x2, 0x4) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) accept4$unix(r2, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 11:30:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000000)=0x4) sendfile(r0, r1, 0x0, 0xedc0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) accept4$llc(r2, 0x0, &(0x7f0000000800), 0x80000) 11:30:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000012c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, &(0x7f0000000100)=@ax25={{0x3, @null}, [@rose, @default, @default, @null, @remote, @rose, @default, @null]}, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) [ 263.261952][ T27] audit: type=1804 audit(1576927800.700:76): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/6/bus" dev="sda1" ino=16550 res=1 11:30:00 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r1, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xff, [@broadcast]}]}}}], 0x30}}], 0x1, 0x0) 11:30:00 executing program 0: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='sT8\"q\xbcw\xfei\xfaysi7\xb0', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) utimes(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000001c0)={{}, {0x0, 0x2710}}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x220000c0, &(0x7f0000000340)=@nl=@kern={0x10, 0x0, 0x0, 0x20080001}, 0x80) unlink(&(0x7f0000000040)='./file0\x00') 11:30:00 executing program 4: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x20000) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x1, 0x0, {0x101, 0x2ab6, 0x2003, 0x0, 0x9, 0x6, 0x3, 0x5}}) r3 = socket(0x1, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000200)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000600)='/dev/midi#\x00', 0xffffffffffffffd3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 263.494801][ T27] audit: type=1804 audit(1576927800.940:77): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/5/bus" dev="sda1" ino=16565 res=1 [ 263.651463][ T27] audit: type=1804 audit(1576927800.980:78): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/5/bus" dev="sda1" ino=16565 res=1 11:30:01 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='\x00\xf2\xff\x00', &(0x7f0000000040)='./file0\x00', 0xad, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8", 0x52efe2e9040d2569}], 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000012c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000300)=0x0) syz_mount_image$erofs(&(0x7f00000000c0)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="160c775c246c99e504baa6cb83999e5c2ed751048666bcd0386235a455dfc27f12e714b2", 0x24, 0x65}, {&(0x7f00000001c0)="401fc46e053f0fdc940f632e4b12bcaa0d25012c0d2b36bd6b2dafa265a4cc0536241d3139a871d750ce32ebb353221083700e354ab77fb3a180aae98ed5599c6e47665b6e5122c97fc49b1a534de22a775bcb717673098c9abe7300fffa0ee6", 0x60, 0xffffffffffff766c}], 0x88000, &(0x7f0000000340)={[{@fault_injection={'fault_injection', 0x3d, 0x3}}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x3}}, {@fault_injection={'fault_injection', 0x3d, 0x27e2}}, {@nouser_xattr='nouser_xattr'}, {@acl='aEl'}, {@nouser_xattr='nouser_xattr'}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}], [{@smackfshat={'smackfshat'}}, {@dont_hash='dont_hash'}, {@euid_eq={'euid', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, r4}}, {@hash='hash'}, {@appraise='appraise'}]}) [ 263.919509][ T27] audit: type=1804 audit(1576927801.000:79): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/5/bus" dev="sda1" ino=16565 res=1 11:30:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2a00c4, &(0x7f00000000c0)={[{@rodir}]}) [ 264.100885][ T27] audit: type=1804 audit(1576927801.000:80): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/5/bus" dev="sda1" ino=16565 res=1 11:30:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000108d00010800000000000000004e000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002811000000000008001b00000000"], 0x3}}, 0x0) [ 264.210627][ T27] audit: type=1804 audit(1576927801.460:81): pid=10114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/7/bus" dev="sda1" ino=16573 res=1 11:30:01 executing program 4: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x20000) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x1, 0x0, {0x101, 0x2ab6, 0x2003, 0x0, 0x9, 0x6, 0x3, 0x5}}) r3 = socket(0x1, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000200)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000600)='/dev/midi#\x00', 0xffffffffffffffd3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) [ 264.501382][ T27] audit: type=1804 audit(1576927801.610:82): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/6/bus" dev="sda1" ino=16563 res=1 11:30:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="a241c033c494244015909da5b107ca95315e6b09e036ef940cedc00ff8dcf58f0127cf9363b0cbea4e1a3f604acb19cd6326482be0bb641f2de72223b45e66fe0f1d4b55160edda36904c334dbfa6ac84ff6c49f8c575c3b5f", 0x59, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0x1000000}]}, @enum={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/236, 0x3e, 0xec, 0x8}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') [ 264.738873][ T27] audit: type=1804 audit(1576927802.170:83): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir387809637/syzkaller.v9xXyh/8/bus" dev="sda1" ino=16571 res=1 11:30:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x100, 0x4, 0x8, 0xb2e}, {0x9, 0x8, 0x7f, 0x400000}, {0x8000, 0x0, 0x5, 0x7d6b}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r1 = socket(0x11, 0xf77243fa533bc850, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x800000003, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) socket(0x11, 0x0, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000280)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="65013ac9f4d14829375b162aed3c1c05bda58cae4658bd8be356eb4ef5e39637b7bf8590b5732094d820ee44fcbc3470a54809c5aef954e5d7f825ab481d2d380d750fc12fe2a5f7022bb2a22fcf4512102c4e5b36392aa204de4a17951ff09847d6610fde498908bc3f5692232e12279990adacfd98355fea758a19942178bcf48fd2e2cf44b28452407c50f539f28266ae7132d16d", 0x96}, {&(0x7f0000000440)="9f7696a7d71c8e59176c9c09ac8e94b7798ee4436cfb4c008f600a79d71702f7d6fa45a8b53cb0d6e32c601b4404f2467cae6de8e44f3d746be21e63c5001edfda3a0bd1ae95832d758f5e17f849ff941750fc3c4b57fc0e0b176e8c8b376b5d112abc0462a7f9ddd4d5264b6740ec7db0661cefe87cd4ee8db5bdd2aabe4ff1c9dbe20a1e71b219d6c7e2d2844d8f88c1b4bd501899e0f172a06fa17348a91f64aa21f7f12cb71d0dc513514fb054da86a27bb8729455c110bf7ba4626890460b9cd7490c97407d76be70b2ce2723b661e7346f97aa3c04254ba193a063b984fe", 0xe1}, {&(0x7f0000000540)="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", 0xfb}], 0x3, &(0x7f0000000640)=[{0x48, 0x116, 0xa6, "3cd97342bb752f998874b3779dcd13d161d1d46142d8db03323775740ad2c12ba47987417d14763fbc8eed6d4c7af9ae7b4c19bc08"}, {0xa8, 0x0, 0x0, "537e8a060787a1fd3c9578748a02092c6acbb14709756e9dac1bc9ac64c167c46af7300ca0ecd556323df5303388426910457f97910b15a422e2e9276c8cb966ea58212c9077da88a6f113ef508b581e19f06380a0f5dcf1edf06e3197cf12d1c9c0f339a49eecd4bdf8684e34b849685f13870e733feee8fc669b7f746cc57867166acda3ae2cc7dccb524f79cfb6938966f5e2abec59"}, {0x20, 0x115, 0x8, "393470a47b6f8c55f6"}, {0x50, 0x10c, 0xff, "a885182b2bacecf78816ffe2cc2e5ffff5b1e6c1d59cf956745d5e54a0849439ada1e6b79539c7c9ec7e67abe7734f19b46d31c542f6f1196d3b5271b0165e8b"}, {0x30, 0x198, 0x80000000, "81aa01b841935f11cfa49b81f50a133f967d52d01981b7d04f"}, {0xd8, 0x104, 0x5, "7a423709d6705bf679d67bb19acd849e7b8cd66f6ecf19604797395ad6e043ccc6e5042bc8736054a9b6b7c0590fead5074ec41c7cf91f23570aad487f0feb4dfbd477bab7361d8c4cc2652004c39d3b30081d4b6a1164d080e6ae200fc24209602974b14ef37707318947029470eb782afbf489c10dde9020ed93b810e5d80792b9e1ab08417f791b5e0a697c893e0ecedfb2f81ecc17c756747d411644887b13888d9149f5fc9f12e6a802713372fa609abd6788c11dab3f06f9db3ecfe7a072f09bff"}, {0x18, 0x0, 0x3, "8c1266316f5911"}], 0x280}, 0x4a050) sendfile(r2, r0, 0x0, 0x72439a6b) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000001d40)=0xff, 0x4) [ 264.890299][T10149] BPF: (anon) type_id=2 bitfield_size=1 bits_offset=0 [ 264.897754][T10149] BPF: [ 264.900636][T10149] BPF:Invalid member bitfield_size [ 264.906065][T10149] BPF: [ 264.906065][T10149] [ 265.208533][ T27] audit: type=1804 audit(1576927802.650:84): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/6/bus" dev="sda1" ino=16563 res=1 11:30:02 executing program 4: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3, 0x20000) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x1, 0x0, {0x101, 0x2ab6, 0x2003, 0x0, 0x9, 0x6, 0x3, 0x5}}) r3 = socket(0x1, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000200)) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000600)='/dev/midi#\x00', 0xffffffffffffffd3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 11:30:02 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000240)={0x1, 0xfffffffffffffeb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x200000000000000, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x4e}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r2, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() r7 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) sendmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r8 = dup(r7) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) r11 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e1f, 0x0, 0x2, 0x80, 0x0, 0x67, r10, r11}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x6, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1fb, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r8, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x58, r11, r6, 0x3, 0x6, 0x6, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x0, 0xc474, 0xfffffffffffffffc, 0x2, 0x0, 0x7}}, 0xa0) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) r13 = getpgid(r12) r14 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r15, 0x0) r16 = getegid() r17 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r17, 0x1, 0x1a, 0x0, 0x0) sendmsg(r17, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r18 = dup(r17) r19 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r19, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r20 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r20, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r21 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r20, r21, 0x0, 0x8000fffffffe) getsockopt$inet_IP_IPSEC_POLICY(r21, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) r23 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r19, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e1f, 0x0, 0x2, 0x80, 0x0, 0x67, r22, r23}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x6, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1fb, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r18, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x58, r23, r16, 0x3, 0x6, 0x6, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x0, 0xc474, 0xfffffffffffffffc, 0x2, 0x0, 0x7}}, 0xa0) r24 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r24, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r25 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r24, r25, 0x0, 0x8000fffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r25, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) r27 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r28, 0x0) r29 = getegid() r30 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r30, 0x1, 0x1a, 0x0, 0x0) sendmsg(r30, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r31 = dup(r30) r32 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r32, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(r32, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) r34 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r32, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@remote, @in6=@rand_addr="20bbcbd1865253e3e58aa219d6ca6440", 0x4e24, 0x2400000000000000, 0x4e1f, 0x0, 0x2, 0x80, 0x0, 0x67, r33, r34}, {0x6, 0x183, 0x3, 0x7f, 0x61553a0b, 0x6, 0x1, 0x4}, {0x20, 0x80000001, 0x2000000000000, 0x9}, 0x9, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x0, 0x3, 0xfffffffffffffffc, 0x1fb, 0x5, 0x6}}, 0xe8) write$P9_RGETATTR(r31, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x1b04, {0x20, 0x3, 0x8}, 0x58, r34, r29, 0x3, 0x6, 0x6, 0x20, 0x5, 0x6f, 0x3ff, 0xf97d, 0x5, 0x0, 0xc474, 0xfffffffffffffffc, 0x2, 0x0, 0x7}}, 0xa0) sendmsg$netlink(r3, &(0x7f0000000580)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1840205}, 0xc, &(0x7f0000000300)=[{&(0x7f00000002c0)={0x14, 0x31, 0x10, 0x1, 0x25dfdbfc, "", [@generic="34c215"]}, 0x14}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r26, r28, r29}}}], 0x60, 0x4048080}, 0x20000000) open(0x0, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) close(r1) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000200)='nfs4\x00', 0x0, 0x0, 0x0, 0x0, 0x200000, &(0x7f0000000c00)='/proc/self/attr/current\x00') r35 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r35, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'HL\x00'}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000380)={&(0x7f0000002000/0x3000)=nil, 0x1, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'netdevsim0\x00', {0x6}, 0x20}) 11:30:03 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000012c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000100)=""/46, 0x2e}, &(0x7f0000000140), 0x10}, 0x20) write$apparmor_current(r4, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) write$P9_RCLUNK(r5, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)={0x2, 'bond0\x00', {0x8}, 0x7f}) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RSTATu(r2, 0x0, 0x0) 11:30:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) 11:30:03 executing program 1: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5d68, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/111, 0x6f}], 0x2, 0x8) dup2(r1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r4, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0xd, 0x6, 0x13, 0xa, 0x1, 0xcb, 0x6, 0x8c}}) 11:30:03 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @rand_addr="a2ae76ee856dbb4536049c00e60399f3"}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 11:30:03 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x32, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @rand_addr="a2ae76ee856dbb4536049c00e60399f3"}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 291.694397][ C1] sched: RT throttling activated 11:30:29 executing program 4: inotify_init1(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, @llc={0x1a, 0x104, 0x20, 0x9, 0x9, 0x5, @local}, @ax25={0x3, @null, 0x2}, @xdp={0x2c, 0x3, 0x0, 0x35}, 0x6, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000180)='bond0\x00', 0x116, 0xc0f, 0x1}) 11:30:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x1c}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xb}, 0x0, 0x200, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0xa5c7ee6cde66d501) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x4ac220ab8d512bf5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x14) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:30:29 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") syz_emit_ethernet(0x82, &(0x7f0000000000)={@random="a9248e6e42e2", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x13}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @empty, @dev, {[@lsrr={0x83, 0x23, 0x0, [@empty, @multicast1, @loopback, @rand_addr, @broadcast, @rand_addr, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x1f, 0x0, [@loopback, @multicast1, @local, @multicast2, @dev, @multicast2, @multicast2]}]}}}}}}}, 0x0) 11:30:29 executing program 3: clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2000200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 11:30:29 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x20000000) 11:30:29 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000eeffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000000000007a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x29, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", &(0x7f00000000c0)=""/41, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 292.370578][T10244] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1768304430 (only 16 groups) [ 292.372097][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 292.372112][ T27] audit: type=1400 audit(1576927829.810:95): avc: denied { sys_admin } for pid=10239 comm="syz-executor.3" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 292.493646][T10246] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1768304430 (only 16 groups) [ 292.520080][T10242] IPVS: ftp: loaded support on port[0] = 21 11:30:30 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000000000000102"]], 0x1) kexec_load(0x1ba001, 0x0, 0x0, 0x3e0000) fcntl$notify(0xffffffffffffffff, 0x402, 0x13) 11:30:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x1c}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xb}, 0x0, 0x200, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0xa5c7ee6cde66d501) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x4ac220ab8d512bf5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x14) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:30:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 293.003380][T10267] IPVS: ftp: loaded support on port[0] = 21 11:30:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x200000000000009}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) 11:30:30 executing program 1: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5d68, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/111, 0x6f}], 0x2, 0x8) dup2(r1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r4, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0xd, 0x6, 0x13, 0xa, 0x1, 0xcb, 0x6, 0x8c}}) 11:30:30 executing program 2: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5d68, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/111, 0x6f}], 0x2, 0x8) dup2(r1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r4, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0xd, 0x6, 0x13, 0xa, 0x1, 0xcb, 0x6, 0x8c}}) 11:30:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x1c}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xb}, 0x0, 0x200, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0xa5c7ee6cde66d501) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x4ac220ab8d512bf5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x14) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:30:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x6000, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x2}) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="503ed9f3e2b1cd43b6caf81cebd40c1412070ad7efdba3b450d35ffeeaf52f4fc2dd729c258b36a9e61b8540a735fbd6fa0e245d8fffa33bc73b62e15d0c12452630650874c690a6f13ec8f4637a4e82b244d4b7dde87bf659b3044e1faebf0851ed54709cd4ee2a9e7afcaf040439f7713e15924206d9fc93cebd589688dc83dc0ca688196ccbceaf8a7d67bdbca47f00248179ac2fb89f9f853a5eac4f83355ef66216bd01c4fb30bb8a9aece3edadc756d45129d68cbf8d84d02112b4de388243bf566f49e238cbd9196b9eac33db112f5b0cd2c7482c750831fdd5c7a498e0dd8ac895c331667a7fd9d8ed35f12612ec5ba56551422e", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x10, &(0x7f0000000180)={r4, 0x4}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYRES32], &(0x7f00000003c0)=0x1) keyctl$search(0xa, r2, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x9) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000040)=0x9, 0x4) sendto$unix(r8, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) recvmmsg(r8, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) fcntl$setlease(r5, 0x400, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x1, @remote}, 0x2, {0x2, 0x4e20, @broadcast}, 'batadv0\x00'}) 11:30:30 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_hwaddr=@random="e02dcf12b367"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() getpriority(0x0, r2) pipe(0x0) close(0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r4, 0x4, 0x8}, 0xc) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000180)={@remote}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {0x0, 0x384}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x5, &(0x7f0000000600)=""/191, 0xbf}, 0xffffffff}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r6, 0x40405514, &(0x7f0000001000)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000006c0)=ANY=[]) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, r5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) [ 293.513147][ T27] audit: type=1804 audit(1576927830.950:96): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir002691638/syzkaller.8XmEJm/10/bus" dev="sda1" ino=16575 res=1 [ 293.717207][ T174] tipc: TX() has been purged, node left! [ 398.803982][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 398.810974][ C0] (detected by 0, t=10502 jiffies, g=12777, q=132) [ 398.817559][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294977027-4294966525), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 398.830907][ C0] syz-executor.1 R running task 26488 10278 9826 0x00004000 [ 398.838806][ C0] Call Trace: [ 398.842080][ C0] [ 398.845019][ C0] sched_show_task.cold+0x2ee/0x35d [ 398.850224][ C0] ? can_nice.part.0+0x20/0x20 [ 398.855043][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 398.860818][ C0] rcu_sched_clock_irq.cold+0xaf4/0xc02 [ 398.866397][ C0] update_process_times+0x2d/0x70 [ 398.871477][ C0] tick_sched_handle+0xa2/0x190 [ 398.876360][ C0] tick_sched_timer+0x53/0x140 [ 398.881124][ C0] __hrtimer_run_queues+0x364/0xe40 [ 398.886330][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 398.891613][ C0] ? hrtimer_init+0x330/0x330 [ 398.896287][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 398.902023][ C0] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 398.908094][ C0] hrtimer_interrupt+0x314/0x770 [ 398.913108][ C0] smp_apic_timer_interrupt+0x160/0x610 [ 398.918657][ C0] apic_timer_interrupt+0xf/0x20 [ 398.923585][ C0] [ 398.926699][ C0] RIP: 0010:balance_dirty_pages_ratelimited+0x1167/0x1e20 [ 398.933815][ C0] Code: 44 0f b6 35 e7 21 df 08 31 ff 44 89 f6 e8 a1 6d df ff 45 84 f6 0f 84 66 02 00 00 e8 53 6c df ff e8 9e c4 cc ff e8 49 6c df ff <48> c7 c6 98 c0 95 81 48 c7 c7 80 56 9a 89 e8 f6 43 c5 ff 31 ff 44 [ 398.953418][ C0] RSP: 0018:ffffc90001597428 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 398.961847][ C0] RAX: 0000000000040000 RBX: ffff888092dd1000 RCX: ffffc90006ffb000 [ 398.969827][ C0] RDX: 0000000000040000 RSI: ffffffff8195c0a7 RDI: 0000000000000001 [ 398.977818][ C0] RBP: ffffc900015974f8 R08: ffff88808def41c0 R09: ffffed1015d0703d [ 398.985792][ C0] R10: ffffed1015d0703c R11: ffff8880ae8381e3 R12: ffff8880a1192000 [ 398.993764][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffffc900015974d0 [ 399.001755][ C0] ? balance_dirty_pages_ratelimited+0x1167/0x1e20 [ 399.008260][ C0] ? balance_dirty_pages_ratelimited+0x1167/0x1e20 [ 399.014768][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 399.021018][ C0] ? balance_dirty_pages+0x2b90/0x2b90 [ 399.026485][ C0] generic_perform_write+0x364/0x540 [ 399.031773][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.038027][ C0] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4b0/0x4b0 [ 399.046119][ C0] ? down_write+0xdf/0x150 [ 399.050582][ C0] ? file_modified+0x85/0xa0 [ 399.055172][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 399.061470][ C0] ext4_buffered_write_iter+0x1fe/0x460 [ 399.067028][ C0] ext4_file_write_iter+0x20d/0x1770 [ 399.072530][ C0] ? ext4_dio_supported+0x630/0x630 [ 399.077739][ C0] ? ___might_sleep+0x163/0x2c0 [ 399.082595][ C0] ? __might_sleep+0x95/0x190 [ 399.087331][ C0] do_iter_readv_writev+0x5f8/0x8f0 [ 399.092548][ C0] ? no_seek_end_llseek_size+0x70/0x70 [ 399.098016][ C0] ? rw_verify_area+0x126/0x360 [ 399.102867][ C0] do_iter_write+0x184/0x610 [ 399.107470][ C0] vfs_iter_write+0x77/0xb0 [ 399.112018][ C0] iter_file_splice_write+0x717/0xc10 [ 399.117404][ C0] ? page_cache_pipe_buf_release+0x290/0x290 [ 399.123396][ C0] ? rw_verify_area+0x126/0x360 [ 399.128245][ C0] ? page_cache_pipe_buf_release+0x290/0x290 [ 399.134227][ C0] direct_splice_actor+0x123/0x190 [ 399.139339][ C0] splice_direct_to_actor+0x3b4/0xa30 [ 399.144711][ C0] ? generic_pipe_buf_nosteal+0x10/0x10 [ 399.150257][ C0] ? do_splice_to+0x180/0x180 [ 399.154934][ C0] ? rw_verify_area+0x126/0x360 [ 399.159784][ C0] do_splice_direct+0x1da/0x2a0 [ 399.164632][ C0] ? splice_direct_to_actor+0xa30/0xa30 [ 399.170239][ C0] ? __sb_start_write+0x2b6/0x460 [ 399.175269][ C0] ? __sb_start_write+0x2e4/0x460 [ 399.180294][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.186532][ C0] ? __sb_start_write+0x1e5/0x460 [ 399.191560][ C0] do_sendfile+0x597/0xd00 [ 399.195984][ C0] ? do_compat_pwritev64+0x1c0/0x1c0 [ 399.201264][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 399.207506][ C0] ? put_timespec64+0xda/0x140 [ 399.212277][ C0] __x64_sys_sendfile64+0x1dd/0x220 [ 399.217474][ C0] ? __ia32_sys_sendfile+0x230/0x230 [ 399.222805][ C0] ? do_syscall_64+0x26/0x790 [ 399.227519][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 399.232871][ C0] ? trace_hardirqs_on+0x67/0x240 [ 399.237898][ C0] do_syscall_64+0xfa/0x790 [ 399.242403][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.248290][ C0] RIP: 0033:0x45a919 [ 399.252195][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.271795][ C0] RSP: 002b:00007f6dbfac1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 399.280211][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a919 [ 399.288290][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 399.296262][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 399.304231][ C0] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f6dbfac26d4 [ 399.312198][ C0] R13: 00000000004c9253 R14: 00000000004e0f50 R15: 00000000ffffffff [ 399.320194][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g12777 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 399.331372][ C0] rcu: RCU grace-period kthread stack dump: [ 399.337256][ C0] rcu_preempt R running task 29272 10 2 0x80004000 [ 399.345168][ C0] Call Trace: [ 399.348464][ C0] __schedule+0x934/0x1f90 [ 399.352898][ C0] ? __sched_text_start+0x8/0x8 [ 399.357747][ C0] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 399.363551][ C0] ? schedule_timeout+0x47c/0xc50 [ 399.368592][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 399.373892][ C0] schedule+0xdc/0x2b0 [ 399.377972][ C0] schedule_timeout+0x486/0xc50 [ 399.382833][ C0] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 399.388645][ C0] ? usleep_range+0x170/0x170 [ 399.393323][ C0] ? trace_hardirqs_on+0x67/0x240 [ 399.398361][ C0] ? __next_timer_interrupt+0x1a0/0x1a0 [ 399.403974][ C0] ? swake_up_one+0x60/0x60 [ 399.408489][ C0] rcu_gp_kthread+0x9b2/0x18d0 [ 399.413261][ C0] ? rcu_barrier+0x350/0x350 [ 399.417853][ C0] ? trace_hardirqs_on+0x67/0x240 [ 399.422881][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 399.429159][ C0] ? __kthread_parkme+0x108/0x1c0 [ 399.434228][ C0] ? __kasan_check_read+0x11/0x20 [ 399.439253][ C0] kthread+0x361/0x430 [ 399.443322][ C0] ? rcu_barrier+0x350/0x350 [ 399.448001][ C0] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 399.453718][ C0] ret_from_fork+0x24/0x30