[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.790427] random: sshd: uninitialized urandom read (32 bytes read) [ 33.117390] kauditd_printk_skb: 10 callbacks suppressed [ 33.117400] audit: type=1400 audit(1574258434.586:35): avc: denied { map } for pid=6976 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 33.202305] random: sshd: uninitialized urandom read (32 bytes read) [ 33.900642] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts. [ 39.531068] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/20 14:00:41 fuzzer started [ 39.738045] audit: type=1400 audit(1574258441.206:36): avc: denied { map } for pid=6986 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.186885] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/20 14:00:42 dialing manager at 10.128.0.105:42857 2019/11/20 14:00:42 syscalls: 2529 2019/11/20 14:00:42 code coverage: enabled 2019/11/20 14:00:42 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/20 14:00:42 extra coverage: extra coverage is not supported by the kernel 2019/11/20 14:00:42 setuid sandbox: enabled 2019/11/20 14:00:42 namespace sandbox: enabled 2019/11/20 14:00:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/20 14:00:42 fault injection: enabled 2019/11/20 14:00:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/20 14:00:42 net packet injection: enabled 2019/11/20 14:00:42 net device setup: enabled 2019/11/20 14:00:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/20 14:00:42 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 42.383378] random: crng init done 14:04:34 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4000, 0x0) 14:04:34 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="e2f23e748cdfecc0d3bcb88248f9f8290c0000000000006e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411fe806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x7}], 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6624402e56be8551e7c73f627ffc714daeb948a7e69a13220f2a3742753e7aa04accdae8d731c28d3073265ebea60fbf683c5f31e6a95f4f64ed7bf33a869e17c700c13e660f8dba9c0bfe2a49cb1bed302e5392e6289fb25f3da56d5d59bf9a50a2623cfbe7196eef7cf6d44f727affc997ad3928e9b80535fc3e95e6272ed8eea27f203cac029287acc6cefccb37a90ba596f49d326dbc34868d6289f27b91b7", 0xa1}], 0x5, &(0x7f00000005c0)}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8c, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 14:04:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f00000002c0)) tkill(r0, 0x19) wait4(0x0, 0x0, 0x0, 0x0) 14:04:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [{@uid_eq={'uid'}}]}) 14:04:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r2, &(0x7f0000000000)="0600000000000000c9b9000f090000002a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0xb3) 14:04:34 executing program 4: r0 = socket$inet(0x10, 0x0, 0x20000000006) sendmmsg$sock(r0, &(0x7f0000003640)=[{{&(0x7f0000001300)=@rc={0x1f, {0xf5, 0x6, 0x40, 0x81, 0x8}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000001580)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}], 0x90}}, {{&(0x7f0000001640)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000016c0)="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", 0xfb}, {&(0x7f00000017c0)="bc031193043d783d13bbbb40081cbee5695b19fa277e11bb2c17ab278652bf", 0x1f}, {0x0}, {&(0x7f0000001900)="ccfed6de5a1d9e6eca41b0afa1b06587892419ab36a453f2710617ba10a3f59f480e8c008fff08cfea1247442ff4e0c53c78e76b8844485ba6efd7fc0ad68af2d8fc5924617d70af119b2065cdbebcfad62c", 0x52}, {&(0x7f00000019c0)}, {&(0x7f0000000800)}], 0x6, &(0x7f0000001b00)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000001d40)="d1d7f01fc7fd6277f89b7337b5a86c08db2bf74f8219f7fbd0143926e5dc53", 0x1f}], 0x2, &(0x7f0000001dc0)=[@txtime={{0x18, 0x1, 0x3d, 0xc26}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}], 0x90}}, {{&(0x7f0000002480)=@pppoe={0x18, 0x0, {0x0, @random="fc8f8257676e", 'veth1\x00'}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002500)="48fc48b32e32a21bbd9c75d109f55c8d3e8489881049d8a59e84db354eca1072b546bb5054aeb78bf7b368183eb83f5147a95b5a15bab986c996d5fc4f3c5acad3c091d974ffa156f4cd4b7ceff28ba66daa0d1ef3ddba0d90b9c8968dfafebd64be054413384ab6e68eb6a63707dc66df424498f4beaef9ee4dfe0516", 0x7d}, {&(0x7f00000025c0)="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", 0xff8}], 0x2, &(0x7f0000003600)=[@txtime={{0x18}}], 0x18}}], 0x4, 0x20000) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x6, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2c0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6, @perf_config_ext={0xd96, 0x3ff}, 0x1100, 0x0, 0x4, 0x7, 0x3, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x525410}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x48004000}, 0x8081) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x4004000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/full\x00', 0x200800, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x3c, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041844}, 0x800) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x80, 0x6, 0x9b, 0x7, 0x0, 0x1, 0x9, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10000, 0x7fff, 0x4, 0x3, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, r1, 0x9) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) gettid() [ 273.026301] audit: type=1400 audit(1574258674.496:37): avc: denied { map } for pid=6986 comm="syz-fuzzer" path="/root/syzkaller-shm885710057" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 273.140289] audit: type=1400 audit(1574258674.526:38): avc: denied { map } for pid=7004 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13743 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 273.511246] IPVS: ftp: loaded support on port[0] = 21 [ 274.348046] chnl_net:caif_netlink_parms(): no params data found [ 274.356088] IPVS: ftp: loaded support on port[0] = 21 [ 274.413609] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.421416] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.429151] device bridge_slave_0 entered promiscuous mode [ 274.441068] IPVS: ftp: loaded support on port[0] = 21 [ 274.449959] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.456778] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.464510] device bridge_slave_1 entered promiscuous mode [ 274.486308] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 274.500106] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 274.547704] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 274.555818] team0: Port device team_slave_0 added [ 274.577605] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 274.586065] team0: Port device team_slave_1 added [ 274.594863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 274.604961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 274.617688] chnl_net:caif_netlink_parms(): no params data found [ 274.712854] device hsr_slave_0 entered promiscuous mode [ 274.750534] device hsr_slave_1 entered promiscuous mode [ 274.793072] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 274.803159] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 274.813436] audit: type=1400 audit(1574258676.286:39): avc: denied { create } for pid=7010 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 274.840783] audit: type=1400 audit(1574258676.286:40): avc: denied { write } for pid=7010 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 274.865870] audit: type=1400 audit(1574258676.286:41): avc: denied { read } for pid=7010 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 274.915134] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.922270] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.929604] device bridge_slave_0 entered promiscuous mode [ 274.937732] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.946110] IPVS: ftp: loaded support on port[0] = 21 [ 274.950351] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.963271] device bridge_slave_1 entered promiscuous mode [ 275.009630] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 275.019204] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 275.066738] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.073597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.081122] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.087750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.099304] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 275.106856] team0: Port device team_slave_0 added [ 275.116821] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 275.125468] team0: Port device team_slave_1 added [ 275.131545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 275.138809] chnl_net:caif_netlink_parms(): no params data found [ 275.153750] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 275.232151] device hsr_slave_0 entered promiscuous mode [ 275.290409] device hsr_slave_1 entered promiscuous mode [ 275.332881] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 275.340746] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 275.354259] IPVS: ftp: loaded support on port[0] = 21 [ 275.366128] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.374952] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.452137] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.459080] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.467731] device bridge_slave_0 entered promiscuous mode [ 275.483888] chnl_net:caif_netlink_parms(): no params data found [ 275.499160] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.506463] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.514522] device bridge_slave_1 entered promiscuous mode [ 275.533039] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 275.553087] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 275.565787] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 275.599461] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 275.608998] team0: Port device team_slave_0 added [ 275.616340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 275.625693] team0: Port device team_slave_1 added [ 275.645287] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 275.653481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 275.682532] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.689178] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.697727] IPVS: ftp: loaded support on port[0] = 21 [ 275.698874] device bridge_slave_0 entered promiscuous mode [ 275.710669] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.717232] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.724321] device bridge_slave_1 entered promiscuous mode [ 275.783589] device hsr_slave_0 entered promiscuous mode [ 275.830535] device hsr_slave_1 entered promiscuous mode [ 275.871029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 275.879842] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 275.904396] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 275.917409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.928426] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 275.954547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 275.966384] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.973188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.980952] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.987774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.016275] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 276.024691] team0: Port device team_slave_0 added [ 276.033570] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 276.043080] team0: Port device team_slave_1 added [ 276.050472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 276.058883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 276.086192] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 276.096013] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 276.102893] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.172653] device hsr_slave_0 entered promiscuous mode [ 276.230813] device hsr_slave_1 entered promiscuous mode [ 276.283333] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 276.291962] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.300678] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.309926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.318588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.333839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.346424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 276.365240] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 276.377320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 276.387380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.399270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.410344] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.418027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.432641] chnl_net:caif_netlink_parms(): no params data found [ 276.459930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 276.472917] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 276.483106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.496407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.506166] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.513553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.522715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.531141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.558630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 276.571301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.583599] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 276.591120] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.598187] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.605880] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.614663] device bridge_slave_0 entered promiscuous mode [ 276.624648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 276.634866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 276.649768] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.658179] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.666235] device bridge_slave_1 entered promiscuous mode [ 276.674415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.738509] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 276.752006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 276.763760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 276.776591] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 276.798826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.809561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.817656] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.824333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.832049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.840824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.849884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.857299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.872296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 276.883718] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 276.891419] team0: Port device team_slave_0 added [ 276.898573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 276.906531] chnl_net:caif_netlink_parms(): no params data found [ 276.926315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.934525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.942744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.950817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.958562] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.965599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.975175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 276.983625] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 276.992014] team0: Port device team_slave_1 added [ 276.999509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 277.011754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.034618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.042539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.050417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.061336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 277.069774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.081258] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 277.087456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.094817] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 277.103136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 277.174022] device hsr_slave_0 entered promiscuous mode [ 277.210982] device hsr_slave_1 entered promiscuous mode [ 277.271064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 277.282672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.290537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.304859] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 277.315302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 277.323113] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 277.335749] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 277.344971] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 277.361047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.368932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.375830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.384602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 277.393823] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.400932] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.407922] device bridge_slave_0 entered promiscuous mode [ 277.416914] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.423809] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.431181] device bridge_slave_1 entered promiscuous mode [ 277.438341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.446236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.454443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.462600] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 277.471217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 277.480844] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 277.486959] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.503708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.513670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.520771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.528081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.535950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.545106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 277.555601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 277.570225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 277.578598] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 277.587863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.599827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.608807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.616634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.624561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.634017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.642035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.649579] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.655998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.665128] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 277.672055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.680994] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 277.689790] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 277.698074] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 277.705822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.712977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.723155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 277.734717] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 277.744413] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 277.752149] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.761514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 277.776478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 277.786262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.794167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.802803] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.809235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.816115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.823844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.831552] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.837896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.844801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.853045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.860835] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.867179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.874143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.888332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 277.901880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 277.923611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 277.933686] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 277.940955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.948575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.956841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.971304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 277.986388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 277.994212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.007520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.015322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.024031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 278.031444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.038412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.046576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.055512] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 278.063610] team0: Port device team_slave_0 added [ 278.069502] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 278.077044] team0: Port device team_slave_1 added [ 278.083126] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 278.090757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.097874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.105591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.116269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 278.128179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 278.139464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.158538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.169913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 278.179657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 278.192704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.202453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.210214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.217978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.228127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 278.237301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 278.253174] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 278.269207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 14:04:39 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x120001, 0x0, [0x0, 0x2, 0x0, 0x0, 0xfffffffffdfffffe, 0x0, 0x0, 0x458d]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 278.277095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.284736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.292581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.302428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 278.320760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 278.329018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.348720] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 278.348824] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 278.371462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 14:04:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x31, &(0x7f0000000000)={0x77359400}, 0x10) [ 278.380901] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 14:04:39 executing program 0: syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@nls={'nls', 0x3d, 'utf8'}}, {@nls={'nls', 0x3d, 'cp936'}}]}) [ 278.453727] device hsr_slave_0 entered promiscuous mode [ 278.469410] hfsplus: unable to change nls mapping [ 278.475176] hfsplus: unable to parse mount options [ 278.510532] device hsr_slave_1 entered promiscuous mode [ 278.539284] hfsplus: unable to change nls mapping [ 278.541116] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 278.551228] hfsplus: unable to parse mount options 14:04:40 executing program 0: gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000300)={'trans=tcp,', {'port'}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@privport='privport'}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) mount$fuse(0x0, 0x0, &(0x7f0000000280)='fuse\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40, 0x210, 0x0, 0x0, 0x38, 0x0, 0x7, 0x100, 0x8}, [{0x0, 0x0, 0x6, 0x1ff, 0xb}], "", [[]]}, 0x178) close(0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 278.557132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.565407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.573765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.581984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.592676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.601592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.610494] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 278.616552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.626811] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 278.634675] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.646448] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 278.653527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 278.672045] 9pnet: p9_fd_create_tcp (7066): problem connecting socket to 127.0.0.1 [ 278.681128] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 278.691205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 278.699077] 9pnet: p9_fd_create_tcp (7070): problem connecting socket to 127.0.0.1 [ 278.705240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 14:04:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 278.719475] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 278.737451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.749762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.757140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.765247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.773092] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.779465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.786689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.795118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.803024] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.809530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.824975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 278.835345] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 278.845434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.852696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.860891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.881999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.888823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.906288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 278.924073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.938236] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 278.945836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.959796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 278.978668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.991832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.012502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 279.029609] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 279.032118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.053811] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 279.064109] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 279.064183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 14:04:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x5) wait4(0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="640f0175490f01b6000000000f01df0f01c5c74424005028aacac744240297000000c7442406000000000f011c24b9b00300000f32f00fc78b0f0000000f01d1b8010000000f01c1dadd", 0x360}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd(0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 279.094871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.098551] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 279.111042] EXT4-fs (loop5): mount failed [ 279.118667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 279.136026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.150346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.175030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 279.183053] hrtimer: interrupt took 51600 ns [ 279.189209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 14:04:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="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", 0x264, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 279.204786] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 279.217854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.248010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.256713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 14:04:40 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) [ 279.309105] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 279.352239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.361969] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 279.372409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.380772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.399955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.416456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 279.424613] device lo entered promiscuous mode [ 279.438439] device lo left promiscuous mode [ 279.449028] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 279.459573] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 279.466439] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.475089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.482715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.495681] device lo entered promiscuous mode [ 279.501100] device lo left promiscuous mode [ 279.507224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 279.527221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 279.553816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.566729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.575462] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.581898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.589970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.598460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.606178] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.613209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.624013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 279.631924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.639101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.653188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 279.660911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.678189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 279.688307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 14:04:41 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180)='iso9660\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000280)=[{0x0}], 0x0, &(0x7f0000000c40)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, '\x00\x00\x00\x009\xf9\aT\x13\x88M\xc5\xd30\xf20\x9dF:V\xec\xa7iyq\xc8\x012\xc2\xfb\x11\xa3\xb2YM\xc3\x90\xc3\xcf\xfa\xaaR\xf8\x14 \x1f\xaey\x80@y\x81\xab\xac\x14\xa7\x14\x835Vj+-\xabX\x862\xf3\x89\x03s\x82\x9b\x9f\xf5\xfa\xb6x\xd5\xcdt\x87d9\xd7w\xd2`\xa3\xf4\xdci\xe5\x94\x16f2\xf9HO\x95\xf9\xe5>\x03cg\xfc\x99\xe8\x91\xe2\xe4\xb9$\t\xb6\x95\x8e\xfd\x8d3w\x8f\xa7rI\x15\xfe\x93\xfbK\t3\xbex\xbd(GI\x82Z+\x8a\xc8\bL\x9a\xbf\xe9tD\xefx\x8c]WB\xe0X\xc7\r\xad\xb2\x13+p\xf2\xd4\x7f\x1bw\x14\xe9\xe3\xa0'}}]}) [ 279.699251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.716105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 279.767986] FAT-fs (loop2): bogus number of reserved sectors [ 279.779536] FAT-fs (loop2): Can't find a valid FAT filesystem [ 279.786667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.788960] dlm: Unknown command passed to DLM device : 9 [ 279.788960] [ 279.799657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.819892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.837641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 279.844831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.852638] dlm: Unknown command passed to DLM device : 9 [ 279.852638] [ 279.858297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.871174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 279.879730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.923241] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 279.929389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.940219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.947962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.959225] FAT-fs (loop2): bogus number of reserved sectors 14:04:41 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@upd={0xe0, 0x10, 0x690ee9b7eac96925, 0x0, 0x0, {{'drbg-pr_sha1((\x02\x00'}, [0x3]}}, 0xff8d}}, 0x0) 14:04:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000000)={0x77359400}, 0x10) [ 279.972817] FAT-fs (loop2): Can't find a valid FAT filesystem [ 279.989944] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 280.005872] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 280.015852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.030424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.054606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.093515] audit: type=1400 audit(1574258681.556:42): avc: denied { create } for pid=7160 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 280.149548] audit: type=1400 audit(1574258681.556:43): avc: denied { write } for pid=7160 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 14:04:43 executing program 4: 14:04:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x12, &(0x7f0000000000)={0x77359400}, 0x10) 14:04:43 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x4c81, 0xfffffffffffffffe) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000280)={0x3f, 0x0, 0x8}) socket$l2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x5, @empty, 'bridge0\x00'}}, 0x1e) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) munlockall() write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x82, 0x7d, 0x0, {0x0, 0x7b, 0x0, 0x5, {}, 0x10000000, 0x3ff, 0x7, 0x4, 0x0, '', 0x10, '/dev/input/mice\x00', 0x37, 'wlan0bdevem0}vmnet0mime_type@posix_acl_accesswlan0ppp0-', 0x1, ')'}}, 0x82) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x6c2b) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x3}, 0x10) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 14:04:43 executing program 5: 14:04:43 executing program 0: 14:04:43 executing program 2: 14:04:43 executing program 2: 14:04:43 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01"], 0x1) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000500)='./file0\x00', 0x20000, 0x80) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d97f8df3b547a2868d36ea659408fb5c687a4d217e44a000000000000"], 0x3b, 0x1) socket(0x10, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x80000001, 0xffffffffffffff1e}) accept4(0xffffffffffffffff, &(0x7f00000003c0)=@alg, 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) ptrace$poke(0xffffffffffffffff, r5, &(0x7f00000001c0), 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) pipe2$9p(0x0, 0x86000) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 14:04:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)) 14:04:43 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f00000001c0)={0x77359400}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 14:04:43 executing program 1: 14:04:43 executing program 2: 14:04:43 executing program 1: [ 281.691949] audit: type=1804 audit(1574258683.166:44): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir269745286/syzkaller.YEms51/9/file0" dev="sda1" ino=16559 res=1 14:04:43 executing program 2: [ 281.873370] audit: type=1804 audit(1574258683.206:45): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir269745286/syzkaller.YEms51/9/file0" dev="sda1" ino=16559 res=1 [ 281.921683] audit: type=1400 audit(1574258683.266:46): avc: denied { wake_alarm } for pid=7202 comm="syz-executor.4" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 14:04:43 executing program 3: 14:04:43 executing program 5: 14:04:43 executing program 1: 14:04:43 executing program 2: 14:04:43 executing program 3: 14:04:46 executing program 0: 14:04:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="230000005e0081aee4050c04000f0000d4ab8cf45c75e96c15db0317351a98e9d4aefe", 0x23}], 0x1}, 0x0) recvmsg(r0, &(0x7f000000c0c0)={0x0, 0x0, 0x0}, 0x0) 14:04:46 executing program 5: 14:04:46 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="1300000032000508d22780648c6394fb0124fc", 0x13}], 0x1}, 0x0) 14:04:46 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x30b, &(0x7f0000000380)=[{&(0x7f0000000140)="2e00000031000508d22780648c6394fb0124fc0010000b400c000200053582c137153e370900018025643000d1bd", 0x2e}], 0x1}, 0x0) 14:04:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x144c0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000080)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:04:46 executing program 2: 14:04:46 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000140)={0x0, r0+30000000}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 14:04:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) delete_module(&(0x7f0000000240)='vfat\x00', 0x200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="08a114f8a2279567d5149b23d81885dc6c40cf431669f75738fd33d3168a09fabbeb927f", 0x24, 0x0, &(0x7f0000000940)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x1e}, 0x2}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe8b) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000400)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) write(0xffffffffffffffff, &(0x7f0000000380)=']', 0x1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x0, &(0x7f00000004c0)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) perf_event_open(&(0x7f0000000300)={0x8a17c2ff3fcfa7db, 0x70, 0x3, 0x81, 0x6, 0x8, 0x0, 0xfffffffffffff1b0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0xe4ae298d2c200068, @perf_bp={&(0x7f0000000080), 0x9}, 0x8831, 0x8, 0x7, 0x4, 0x8695, 0x64, 0x3}, r3, 0x10, r4, 0x0) io_submit(0x0, 0x0, &(0x7f0000000440)) r6 = open(0x0, 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r6, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) 14:04:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000077000)=""/133, 0x139) getdents64(r0, &(0x7f0000000780)=""/1682, 0x692) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000179f35)=""/203, 0xcb) [ 284.756598] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. 14:04:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000640)="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", 0x265, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 14:04:46 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10200000003) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) 14:04:46 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x80, 0x0}, 0xb300) 14:04:46 executing program 2: 14:04:46 executing program 3: 14:04:46 executing program 3: 14:04:46 executing program 2: 14:04:47 executing program 4: 14:04:47 executing program 0: 14:04:47 executing program 2: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0xf}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000}, 0x842}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20004) close(r1) 14:04:47 executing program 1: 14:04:47 executing program 5: 14:04:47 executing program 3: 14:04:47 executing program 0: 14:04:47 executing program 4: 14:04:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x2, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 14:04:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) openat$vsock(0xffffffffffffff9c, 0x0, 0x144c0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x100) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000080)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:04:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x5, 0x6}) 14:04:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe8b) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) getpid() 14:04:47 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) 14:04:47 executing program 4: getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000540)) r0 = socket$inet(0x10, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @local}, 0x1c, 0x0}, 0x0) open(0x0, 0x141042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000103ff8)='./file0\x00', 0x0, 0x0) open(0x0, 0x4008040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', 0x0) setxattr$security_smack_transmute(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x3) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) 14:04:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) read$char_usb(r0, &(0x7f0000000300)=""/117, 0x75) 14:04:47 executing program 3: clock_nanosleep(0x8, 0x1, &(0x7f00000001c0)={0x77359400}, 0x0) 14:04:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x144c0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000080)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:04:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 14:04:47 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendto(0xffffffffffffffff, &(0x7f0000000c40)="fc0f7aa02a4c362297bc2fa3775031704c54445b4580c907bd676f07d74b3fa49472fdd91b6ec39d6a7b1d38caf99a14f2b4b5c579351f200ef5a8087e0686701dd3a8761145dd13a9a0c8d886a536029b87f69bb52571059c1c2884ba3e1f7310b043b321419edf119e6a4d33cc5b0ec3ae3f40c9b662f111ed1c73eb88d0ec3b8257f1a61e433b72ee07ce724987836db1269cbf0c3ba5b6d61180d9077534b51213d922b5", 0xa6, 0x200100c0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b00)={0x1c, 0x17, 0x101, 0x0, 0x25dfdbfd, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 14:04:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 14:04:47 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) 14:04:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 14:04:48 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0xe6a846deeb780ab) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) [ 286.560370] ------------[ cut here ]------------ [ 286.565380] kernel BUG at fs/buffer.c:605! [ 286.576204] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 286.581882] Modules linked in: [ 286.585266] CPU: 0 PID: 7325 Comm: syz-executor.0 Not tainted 4.14.154 #0 [ 286.593242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.603145] task: ffff8880a5da2340 task.stack: ffff88804ef30000 [ 286.609329] RIP: 0010:mark_buffer_dirty_inode+0x2ea/0x3e0 [ 286.615021] RSP: 0018:ffff88804ef37528 EFLAGS: 00010246 [ 286.620378] RAX: 0000000000040000 RBX: ffff88809a26d7e0 RCX: ffffc90005e3d000 [ 286.627639] RDX: 0000000000040000 RSI: ffffffff8199d60a RDI: ffff8880888699b8 [ 286.634978] RBP: ffff88804ef37560 R08: ffff8880a5da2340 R09: 0000000000000003 [ 286.642234] R10: 0000000000000000 R11: ffff8880a5da2340 R12: ffff888088869858 [ 286.649487] R13: 0000000000000000 R14: ffff888088a4a720 R15: 0000000000001c9f [ 286.656764] FS: 00007f5eddc73700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 286.665502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.671547] CR2: 0000000000713934 CR3: 00000000930b3000 CR4: 00000000001406f0 [ 286.678827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.686098] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.693470] Call Trace: [ 286.696124] fat16_ent_put+0xc5/0x100 [ 286.700021] fat_ent_write+0xc2/0x190 [ 286.703809] fat_chain_add+0x3ed/0x590 [ 286.707688] ? fat_clusters_flush+0x380/0x380 [ 286.712447] ? pagevec_lookup_range+0x37/0x80 [ 286.716966] fat_add_cluster+0xa1/0xc0 [ 286.721635] ? fat_fill_super+0x3560/0x3560 [ 286.725942] fat_get_block+0x2d4/0x7e0 [ 286.729813] ? fat_add_cluster+0xc0/0xc0 [ 286.733866] ? create_page_buffers+0xd3/0x1c0 [ 286.738351] __block_write_begin_int+0x396/0x1100 [ 286.743188] ? fat_add_cluster+0xc0/0xc0 [ 286.747505] ? __breadahead+0xd0/0xd0 [ 286.751650] ? lock_downgrade+0x740/0x740 [ 286.756059] ? wait_for_stable_page+0x121/0x270 [ 286.761762] ? fat_add_cluster+0xc0/0xc0 [ 286.765820] block_write_begin+0x5f/0x190 [ 286.769950] cont_write_begin+0x430/0x770 [ 286.774169] ? save_trace+0x290/0x290 [ 286.777951] ? __mark_inode_dirty+0x2b7/0x1040 [ 286.782522] ? block_write_begin+0x190/0x190 [ 286.786974] ? iov_iter_fault_in_readable+0x1da/0x3c0 [ 286.792420] fat_write_begin+0x8d/0x120 [ 286.796389] ? fat_add_cluster+0xc0/0xc0 [ 286.800464] generic_perform_write+0x1f8/0x480 [ 286.805984] ? page_endio+0x530/0x530 [ 286.810212] ? current_time+0xb0/0xb0 [ 286.813996] ? generic_file_write_iter+0x9a/0x660 [ 286.818820] __generic_file_write_iter+0x239/0x5b0 [ 286.823837] generic_file_write_iter+0x303/0x660 [ 286.828962] __vfs_write+0x4a7/0x6b0 [ 286.832756] ? kernel_read+0x120/0x120 [ 286.836788] ? check_preemption_disabled+0x3c/0x250 [ 286.841878] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 286.847318] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 286.854585] ? __sb_start_write+0x153/0x2f0 [ 286.858893] vfs_write+0x198/0x500 [ 286.862417] SyS_write+0xfd/0x230 [ 286.865853] ? SyS_read+0x230/0x230 [ 286.869510] ? do_syscall_64+0x53/0x640 [ 286.873469] ? SyS_read+0x230/0x230 [ 286.877175] do_syscall_64+0x1e8/0x640 [ 286.881045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.885928] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.891881] RIP: 0033:0x45a639 [ 286.895052] RSP: 002b:00007f5eddc72c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.902751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 286.910003] RDX: 00000000fffffe8b RSI: 0000000020000100 RDI: 0000000000000004 [ 286.917342] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.924701] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5eddc736d4 [ 286.931961] R13: 00000000004caf1e R14: 00000000004e33c8 R15: 00000000ffffffff [ 286.939482] Code: fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 4d 4c 89 63 58 4c 89 ef e8 e0 2a 83 04 e9 13 fe ff ff e8 c6 63 c3 ff <0f> 0b 4c 89 ff e8 dc 16 ed ff e9 f8 fd ff ff e8 d2 16 ed ff e9 [ 286.959220] RIP: mark_buffer_dirty_inode+0x2ea/0x3e0 RSP: ffff88804ef37528 [ 286.969675] base_sock_release(ffff88809a13d080) sk=ffff8880a878a8c0 [ 286.977447] getblk(): invalid block size 512 requested [ 286.984490] logical block size: 4096 [ 286.985201] kobject: 'loop0' (ffff888050bf20e0): kobject_uevent_env [ 286.988337] ---[ end trace c5d5edb2f5b4b9b2 ]--- [ 286.999846] kobject: 'loop0' (ffff888050bf20e0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 287.002815] CPU: 0 PID: 7342 Comm: syz-executor.0 Tainted: G D 4.14.154 #0 [ 287.014989] kobject: 'loop2' (ffff8880a4a38960): kobject_uevent_env [ 287.017722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.017726] Call Trace: [ 287.017814] dump_stack+0x142/0x197 [ 287.017829] __getblk_gfp.cold+0xc4/0xe5 [ 287.028362] kobject: 'loop2' (ffff8880a4a38960): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 287.033667] ? save_stack+0xa9/0xd0 [ 287.033715] ? save_stack_trace+0x16/0x20 [ 287.033721] ? save_stack+0x45/0xd0 [ 287.033726] ? kasan_kmalloc+0xce/0xf0 [ 287.033732] ? kasan_slab_alloc+0xf/0x20 [ 287.033739] ? kmem_cache_alloc+0x12e/0x780 [ 287.033751] __bread_gfp+0x2e/0x290 [ 287.033761] fat__get_entry+0x4a3/0x8b0 [ 287.033771] ? trace_hardirqs_on+0x10/0x10 [ 287.033783] ? fat_ioctl_filldir+0x460/0x460 [ 287.067952] base_sock_release(ffff8880940d7940) sk=ffff8880a1e1cac0 [ 287.069041] ? trace_hardirqs_on+0x10/0x10 [ 287.069054] fat_search_long+0x233/0x1190 [ 287.079650] Kernel panic - not syncing: Fatal exception [ 287.081250] ? lock_acquire+0x16f/0x430 [ 287.118021] ? fat_parse_short+0x1fc0/0x1fc0 [ 287.122423] ? __d_lookup_rcu+0x312/0x630 [ 287.126555] ? vfat_lookup+0xcf/0x510 [ 287.130530] ? lock_downgrade+0x740/0x740 [ 287.134690] ? mutex_trylock+0x1c0/0x1c0 [ 287.138752] ? d_alloc_parallel+0x8c3/0x1800 [ 287.143151] ? speculation_ctrl_update_current+0x50/0x50 [ 287.148740] vfat_find+0xee/0x120 [ 287.152184] vfat_lookup+0xe0/0x510 [ 287.155887] ? vfat_unlink+0x2b0/0x2b0 [ 287.159828] ? lookup_slow+0x138/0x440 [ 287.163736] lookup_slow+0x226/0x440 [ 287.167647] ? legitimize_path.isra.0+0xe0/0x190 [ 287.172785] ? vfs_unlink+0x480/0x480 [ 287.176922] ? security_inode_permission+0xbb/0xf0 [ 287.181855] walk_component+0x698/0x1d00 [ 287.185956] ? path_init+0x1920/0x1920 [ 287.189841] ? walk_component+0x1d00/0x1d00 [ 287.194254] path_lookupat.isra.0+0x1bb/0x7b0 [ 287.198842] ? path_parentat.isra.0+0x150/0x150 [ 287.203597] ? __alloc_pages_nodemask+0x3ae/0x7a0 [ 287.208689] filename_lookup+0x18e/0x380 [ 287.212742] ? lock_downgrade+0x740/0x740 [ 287.216894] ? filename_parentat.isra.0+0x3b0/0x3b0 [ 287.222250] ? __phys_addr_symbol+0x23/0x60 [ 287.226573] ? __check_object_size+0x13b/0x2ac [ 287.231331] ? getname_flags+0x243/0x580 [ 287.235393] user_path_at_empty+0x43/0x50 [ 287.239534] SyS_chdir+0x86/0x190 [ 287.243090] ? SyS_access+0x6b0/0x6b0 [ 287.246965] ? do_syscall_64+0x53/0x640 [ 287.251218] ? SyS_access+0x6b0/0x6b0 [ 287.255108] do_syscall_64+0x1e8/0x640 [ 287.258982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.264485] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 287.269762] RIP: 0033:0x45a639 [ 287.273306] RSP: 002b:00007f5eddc30c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 287.281649] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045a639 [ 287.289303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 287.296605] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 287.304395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5eddc316d4 [ 287.311655] R13: 00000000004c008d R14: 00000000004d3570 R15: 00000000ffffffff [ 287.320437] Kernel Offset: disabled [ 287.324339] Rebooting in 86400 seconds..