[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.129651] random: sshd: uninitialized urandom read (32 bytes read) [ 32.367657] kauditd_printk_skb: 9 callbacks suppressed [ 32.367664] audit: type=1400 audit(1568492481.885:35): avc: denied { map } for pid=6763 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.417431] random: sshd: uninitialized urandom read (32 bytes read) [ 32.978765] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.82' (ECDSA) to the list of known hosts. [ 38.395396] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/14 20:21:28 fuzzer started [ 38.585843] audit: type=1400 audit(1568492488.105:36): avc: denied { map } for pid=6773 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.195504] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/14 20:21:29 dialing manager at 10.128.0.105:34685 2019/09/14 20:21:29 syscalls: 2466 2019/09/14 20:21:29 code coverage: enabled 2019/09/14 20:21:29 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/14 20:21:29 extra coverage: extra coverage is not supported by the kernel 2019/09/14 20:21:29 setuid sandbox: enabled 2019/09/14 20:21:29 namespace sandbox: enabled 2019/09/14 20:21:29 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/14 20:21:29 fault injection: enabled 2019/09/14 20:21:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/14 20:21:29 net packet injection: enabled 2019/09/14 20:21:29 net device setup: enabled [ 40.760274] random: crng init done 20:23:09 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/126, 0x7e) 20:23:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[@tclass={{0x14, 0x29, 0x43, 0x2f9c34eb}}], 0x18}}], 0x2, 0x0) 20:23:09 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x109000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000680)=""/4096, 0x1a) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000100)=""/246, 0x0) 20:23:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) epoll_create1(0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000395000)=[{0x0}], 0x1) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 20:23:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x10, 0x0, 0xffff8000}]}) 20:23:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300470800000000000000000400000010001800010f0006ac0f0002ac0f0000"], 0x269}}, 0x0) [ 140.456939] audit: type=1400 audit(1568492589.975:37): avc: denied { map } for pid=6791 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 140.870827] IPVS: ftp: loaded support on port[0] = 21 [ 141.757115] chnl_net:caif_netlink_parms(): no params data found [ 141.764828] IPVS: ftp: loaded support on port[0] = 21 [ 141.795952] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.802565] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.809374] device bridge_slave_0 entered promiscuous mode [ 141.815971] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.822574] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.829611] device bridge_slave_1 entered promiscuous mode [ 141.853241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.863362] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.881919] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.888977] team0: Port device team_slave_0 added [ 141.895875] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.902876] team0: Port device team_slave_1 added [ 141.911296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 141.922266] IPVS: ftp: loaded support on port[0] = 21 [ 141.931776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 141.981653] device hsr_slave_0 entered promiscuous mode [ 142.030303] device hsr_slave_1 entered promiscuous mode [ 142.117151] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.131936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.138639] chnl_net:caif_netlink_parms(): no params data found [ 142.164247] IPVS: ftp: loaded support on port[0] = 21 [ 142.165311] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.175923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.182695] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.189017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.224107] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.231407] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.238176] device bridge_slave_0 entered promiscuous mode [ 142.244860] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.251363] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.258178] device bridge_slave_1 entered promiscuous mode [ 142.291869] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.300616] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.343877] chnl_net:caif_netlink_parms(): no params data found [ 142.366049] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.373377] team0: Port device team_slave_0 added [ 142.388799] IPVS: ftp: loaded support on port[0] = 21 [ 142.402171] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.409158] team0: Port device team_slave_1 added [ 142.415395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.423677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.531926] device hsr_slave_0 entered promiscuous mode [ 142.590244] device hsr_slave_1 entered promiscuous mode [ 142.666002] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.673780] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 142.679855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.705208] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.712294] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.719061] device bridge_slave_0 entered promiscuous mode [ 142.725471] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.737532] chnl_net:caif_netlink_parms(): no params data found [ 142.745436] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.752186] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.758954] device bridge_slave_1 entered promiscuous mode [ 142.766146] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.792434] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.807471] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.824866] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.831755] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 142.842847] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.864286] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.883192] IPVS: ftp: loaded support on port[0] = 21 [ 142.889037] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.896451] team0: Port device team_slave_0 added [ 142.902889] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.909502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.916377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.934340] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.940812] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.948060] device bridge_slave_0 entered promiscuous mode [ 142.954718] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.962022] team0: Port device team_slave_1 added [ 142.967336] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.975684] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 142.982081] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.992666] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.999067] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.007410] device bridge_slave_1 entered promiscuous mode [ 143.027426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.048610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.057663] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.073400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.081334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.088804] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.095181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.143144] device hsr_slave_0 entered promiscuous mode [ 143.202279] device hsr_slave_1 entered promiscuous mode [ 143.251026] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.262955] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.275433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.284407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.292189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.299751] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.306107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.315931] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.335308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.361985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.381158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 143.391212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 143.415502] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.422844] team0: Port device team_slave_0 added [ 143.429360] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.436252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.444181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.451909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.459297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.468156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 143.479553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.487044] team0: Port device team_slave_1 added [ 143.492475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.501519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.509023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.516812] chnl_net:caif_netlink_parms(): no params data found [ 143.530227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 143.549489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.563238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.571050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.580752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 143.589908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.604028] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 143.610183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.663226] device hsr_slave_0 entered promiscuous mode [ 143.710288] device hsr_slave_1 entered promiscuous mode [ 143.770681] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.777611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.785171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.815166] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.835669] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.843323] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.850306] device bridge_slave_0 entered promiscuous mode [ 143.857370] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 143.869129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.877162] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.883612] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.890541] device bridge_slave_1 entered promiscuous mode [ 143.911789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 143.921113] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 143.930937] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 143.937001] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.964522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.971500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.981607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.994209] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.015110] chnl_net:caif_netlink_parms(): no params data found [ 144.025890] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.034439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.043551] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.053408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.068558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.076925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.084600] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.091001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.100803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.110417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.124233] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.131613] team0: Port device team_slave_0 added [ 144.145251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.152642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.160521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.167992] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.174349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.184397] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.196045] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.203276] team0: Port device team_slave_1 added [ 144.211662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.221247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.228861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.236528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.243517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.251166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.260952] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.267007] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.273878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.281274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.289471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.306312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.322423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.330424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.338041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.346045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.353846] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.360225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.368796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.380975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 144.407777] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.415644] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.422653] device bridge_slave_0 entered promiscuous mode 20:23:13 executing program 5: 20:23:14 executing program 5: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x805c6103, &(0x7f00000000c0)) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f00000000c0)) prctl$PR_GET_NO_NEW_PRIVS(0x27) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000080), 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) [ 144.436670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.444998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.463520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.473949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.485418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.494803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.507586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 144.518835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.526538] bridge0: port 2(bridge_slave_1) entered blocking state 20:23:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1132}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(r0) [ 144.533342] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.542665] device bridge_slave_1 entered promiscuous mode [ 144.573533] device hsr_slave_0 entered promiscuous mode [ 144.610467] device hsr_slave_1 entered promiscuous mode [ 144.650607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.658093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.665624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.673370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.681110] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.687433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.695893] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 144.702214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.719988] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.728845] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.736175] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.744116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.754902] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 144.770889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.781173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.795155] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.804622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.814705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.831981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.841511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.848506] team0: Port device team_slave_0 added [ 144.874273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.881445] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.888523] team0: Port device team_slave_1 added [ 144.894557] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.907052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.918332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 20:23:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6c56c10224fc00100000000a000400050082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 144.930499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.938844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.948366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.956555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.983143] audit: type=1400 audit(1568492594.505:38): avc: denied { create } for pid=6843 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 144.994965] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.016651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.027044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.036886] audit: type=1400 audit(1568492594.555:39): avc: denied { write } for pid=6843 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 145.037532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.068763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.075785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:23:14 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 145.084328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.145593] device hsr_slave_0 entered promiscuous mode 20:23:14 executing program 5: [ 145.200352] device hsr_slave_1 entered promiscuous mode [ 145.222970] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 145.230110] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 20:23:14 executing program 5: [ 145.247602] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.254477] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.267941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.282235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.291669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 20:23:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dc87055e0bcf647bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb}, 0xffffffd8) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) [ 145.298956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.338546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.350649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.357989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.368103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.376537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.388483] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.394858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.404282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.416600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.427200] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.433741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.444011] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.452573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.463918] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.472000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.479656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.487541] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.493899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.503223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.515981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.526882] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.538609] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 145.546537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.556774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.568011] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.580858] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.591101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.605457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.612087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.626430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.636531] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.644632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.652736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.661060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.669001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.676864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.691050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.698497] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.704853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.711799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.718590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.730816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.738751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.747899] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.756647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.766505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.774127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.782106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.789570] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.795933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.802808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.809524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.819865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.830788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.838349] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.845552] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.856164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.864130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.871806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.881451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.890402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.898858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.909067] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.915365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.922807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.932365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.939663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.949081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.958077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.966856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.974612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.982248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.989819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.997461] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.003838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.011367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.018168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.028645] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.039703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.054171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.061454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.069733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.078781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.086570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.094510] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.100909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.109749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.120282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.127009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.134890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.147700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.160633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.170225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.177143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.185788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.194009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.205032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.214637] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.221378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.230648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.237648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.245756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.262455] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.270147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.277620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.290571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.303293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.313981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.326360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.333232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.341280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.351730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.361114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.368445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.377509] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.384432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.402449] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.413479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.477903] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.557795] hrtimer: interrupt took 24028 ns 20:23:17 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x109000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000680)=""/4096, 0x1a) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000100)=""/246, 0x0) 20:23:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:23:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dc87055e0bcf647bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb}, 0xffffffd8) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 20:23:17 executing program 1: getrandom(&(0x7f00000002c0)=""/4096, 0x1000, 0x2) 20:23:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x5010, 0x0) 20:23:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") io_setup(0x80400000000002, &(0x7f00000000c0)=0x0) io_getevents(r1, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r2 = memfd_create(&(0x7f0000000340)='-self&)vboxn\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r2, 0x0) io_submit(r1, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) syz_open_dev$sndseq(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:23:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x160) fallocate(r4, 0x0, 0x0, 0x2000002) read$eventfd(r4, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{r3, 0x20}, {r3, 0x400}, {r3, 0x4000}, {r3, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r3, 0x200}, {r0, 0x100}], 0x8, 0x9) fallocate(r1, 0x800000000000002, 0x6, 0xffffffff) r5 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r6 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r5, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000) r7 = dup(r6) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = getgid() sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@rand_addr=0x8001, @in=@broadcast, 0x4e22, 0x8, 0x0, 0x7f, 0x2, 0x0, 0x80, 0x32}, {0x0, 0x1, 0x100, 0x800, 0x8, 0xffff, 0x8, 0xffffffffffffff7f}, {0x0, 0x0, 0x1, 0x2}, 0x5, 0x6e6bb5, 0x2, 0x1, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0xc}, 0x0, 0xff}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x1, 0x3, 0x2}}, 0xe8) ftruncate(r5, 0x800fe) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={0x0, 0xee01, r8}, 0xc) getsockname$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10) sendfile(r7, r9, 0x0, 0x8000fffffffe) sendmsg$nl_netfilter(r9, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x10fc, 0x10, 0x8, 0x600, 0x70bd2a, 0x0, {0x3, 0x0, 0x2}, [@typed={0x8, 0x10000, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="2e02a63dba133160d96b894a4eae84fa17fa8c7afd1febeb4404db1729062da5f83d54c9a9ca02407b867aa8c72261c89eb8a92fbd559fb8ae1aa2e142e2614866cc3928590d40a0ce8536aa1508890d26", @nested={0x108c, 0x19, [@generic, @typed={0x18, 0x6a, @binary="805f959abe8b298110177c91e4fa3a2dcfda"}, @generic="83aa392c68dcbc7f71015a6c0c14c921ad39e4a7d43c26334fa5482fb527569c856b02084b41418e86a13d6180709114e03e74fcfaaa6e323bb9b18310f322d00a0623dae4f96310b2004caaa269922a9731da3078eac3afdc5e1b237ac814fe6bdd6f0658f7d479b7c8a9f5", @generic="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", @typed={0xc, 0xa, @u64=0x3b43}]}]}, 0x10fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001880)={{{@in, @in6=@initdev}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) [ 148.108491] input: syz0 as /devices/virtual/input/input5 20:23:17 executing program 4: [ 148.157586] audit: type=1400 audit(1568492597.675:40): avc: denied { map } for pid=6911 comm="syz-executor.0" path=2F6D656D66643A2D73656C66262976626F786E202864656C6574656429 dev="tmpfs" ino=27020 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 20:23:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dc87055e0bcf647bf070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) socket$caif_seqpacket(0x25, 0x5, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb}, 0xffffffd8) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) [ 148.216520] input: syz0 as /devices/virtual/input/input6 20:23:17 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x160) fallocate(r4, 0x0, 0x0, 0x2000002) read$eventfd(r4, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{r3, 0x20}, {r3, 0x400}, {r3, 0x4000}, {r3, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r3, 0x200}, {r0, 0x100}], 0x8, 0x9) fallocate(r1, 0x800000000000002, 0x6, 0xffffffff) r5 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r6 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r5, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000) r7 = dup(r6) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = getgid() sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@rand_addr=0x8001, @in=@broadcast, 0x4e22, 0x8, 0x0, 0x7f, 0x2, 0x0, 0x80, 0x32}, {0x0, 0x1, 0x100, 0x800, 0x8, 0xffff, 0x8, 0xffffffffffffff7f}, {0x0, 0x0, 0x1, 0x2}, 0x5, 0x6e6bb5, 0x2, 0x1, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0xc}, 0x0, 0xff}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x1, 0x3, 0x2}}, 0xe8) ftruncate(r5, 0x800fe) r10 = getpid() setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={r10, 0xee01, r8}, 0xc) getsockname$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10) sendfile(r7, r9, 0x0, 0x8000fffffffe) sendmsg$nl_netfilter(r9, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x10fc, 0x10, 0x8, 0x600, 0x70bd2a, 0x0, {0x3, 0x0, 0x2}, [@typed={0x8, 0x10000, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="2e02a63dba133160d96b894a4eae84fa17fa8c7afd1febeb4404db1729062da5f83d54c9a9ca02407b867aa8c72261c89eb8a92fbd559fb8ae1aa2e142e2614866cc3928590d40a0ce8536aa1508890d26", @nested={0x108c, 0x19, [@generic, @typed={0x18, 0x6a, @binary="805f959abe8b298110177c91e4fa3a2dcfda"}, @generic="83aa392c68dcbc7f71015a6c0c14c921ad39e4a7d43c26334fa5482fb527569c856b02084b41418e86a13d6180709114e03e74fcfaaa6e323bb9b18310f322d00a0623dae4f96310b2004caaa269922a9731da3078eac3afdc5e1b237ac814fe6bdd6f0658f7d479b7c8a9f5", @generic="57021e010c5f6a58db8c7a41f83f183b4d0ecdbf8da9cc14202f5e859f24c6c264d26f747d3d49354edba89c42aea49efa064c00616e017d5528b0b5b317a3acea89f92c3008d115484e05e7ad2cd4ca1700ddee9870fe97d3106a41faca935622e44b85c51df80b52f63b40c312d2b96d3fc53be91bd21c7953e6a0846cbb0025e8ad9476aac96573b79b71b228415b12777a53f78ae02391a6b2dffe672f0f1a7693a36133d8965f17d03234fca160b624533a908d33913e80a3b211fa459f0aea5989e1b9e7fa185836420712b4a3d92c88da715f9eb3d564b26c4e8aa71d22bd1ef3a01a30d814a732213e01b30a6fe3a2a127341926ebb3693a2106de3fdc9ce09ef86c89f5dc4aa5b922245e78e49ec85c6fc61ca6517c1ec837228e1909cc8b302ea58a60c4df2dd5876351fbe7c51f007dc29dd4a8d60f200cde68a00442f7c3d8722ec9afcc415e238b7ae9c94615e703a6dafc40600e325a5604474565b561175075d2caf1276fcfe3343aa73c1cd55145f585f3fe1d08077455089af824f8039ea8fbaad40bda904f5c7cfc1ba789968d168e807aee6469df14404549847a4367951f816a6e7ee6825443d4c491e5308e0679945816e023b7749eca152aaf2496a9b78b5be9a42c2e2556c3009c6c0a414e82b9a482b7521f8e4688d466b5aa4bc65e26580fec98b767639d93be7860ad2ff9f9c2e117c8133dda3ebe88ebd0dd5b70c3701f6b426c4720ce623e1eff78dc1a09bd891ab51ccfccab1f5779df7fb93f775c8342a31b1cf22abccdd7dbd10f1c8b5c100806ff4d14abc4243a24f88ab2d214b37e2664d63d1abb0aa0b8226acfff714b1ba93d9fd2ebe84821476efeb688bba20671729252551224430be36596022977c79396a6990d17b19a139b7a44619c9b60b6ac134f0ee6f88567041bfd235b8abff233fb4605f647d89267a25fdd86629c913daa2b4122371dea42fe692fecac694879d97728204a5602299a586fcf98daf3f571e2de8f5113cbf6b3230a72fb6d10e82e4a3e70951317d3a6c239551535df947aa1bd02275e408a6f5805d9380e54c8c781d931371fac38448e11c9f415136973f3fe91f91978036e9af067233066880c520a28ec20d7e773f47340ff902d6ac0a9f934fac9d87e338fa429c8d1cc4b393eb049b06df20ca924c4be7d4f09b90abdf84d654b6f3d1f76663c4ed48505a4b2dafb59020c4217471aa52b6e3f07b68370b344b7e764155033a784d928008c9b1ee04353e9964429752ffeff2ae5918d5f2d172e5cb06f231a70bca73f1f4d179106aad1f796cecbca65baad4a6c1cc58d1ade4b7e6d64e3bfebb8bcf39584ef91f7844e6e6014c95b575b7b4d7db481b444f59b9cf8ae8d578dd8a04f48fd0bda028855b173f25ef7164d8bbd6d642b65e6f92ba02e62273c27ba7f15f3d4c0ea427c6bc5d5aaf1c374571e91a90b9b466a1667aeb2b1d9e628aa17cc87083d0928411db022bbfaf5da0c4f5f8bdecf52a794f66126692d98f5f852afbcb1487d60e9a5159fdd59e8b316618933aed7d26fc2101b2106a3e7a5d546624693487c81393529caaee3e785a79141cd2573151919597be85c2105a3bfe18b0fd461a3c82d2437a1a48cacb6ea27f545f3b758ebb81f24f9b3d086863804ff77fa3d5283673b27e7634237cdefe30b155d67d29ca663f46266cd3d168063eaea3e08add63c26ba7d23ec9e62f12a2f85e8d902b63a9032d3f617f2d21fef12f316c29865df0837173c102af2ed8f4c63970cf2d388ef59cc7115b982d63fbeb8b46a22adbf8c92438d3fad9ec44bbdbf1f16e3216067aec43ed9dd6fdda0986a2034bb90c11991490b21a97f039d0d3e69e6cc5b3c0c146445c56cf0481d388ed51d3fe7baacc907e9a283ae2bd7e62a5d6f4ba5be2a2f84f7e23320c26a2950b58808098f6e4960b0176cdbbae9b0d63a92d9759bb13997649f4a0ab60e194d1f309b0139f140efddd0610434ed4b4cb8cd959e9206a26a3048b67488b6722f83a4000859aa2bce1e778e04d541be0934f38ab8cfd679465dc97e86a275e8afc838632c9eb2a50ba980736885c06ba06eafbcf18e238acfcd5694223b1a2bbb2106ba450a242676fd6c47f1d249d5a48175efb0943cb9a73a5781e69a2caf9a7a29139da47f8627983c7a743021abdb7d418401f83ef9f7264d2a665bb7e142aeb00d6870cec7c28d993139eb2a1e4cecd579b02c5e1240d763ae822053e50b4a44e954b0ed8006c23ddcb97b058a9dba3b0339125bda2b2e26ca3d2e40cbbaea47b1c8118400da76bb568b3e531335ebfcf31f713e21fb39974017f38771b81443ba1b934bd4f4915a795659159af81d71d730f89a18aa1d76c65956e4a9fd94352d7f43a7a57fc418fcccd511ea21065613c31975cc3171051c634a38875251b175c4eef8a12729444e2617e3420d22dd517d861a9b022cae24324910cf3f021177e915c5c52e5c7a0d7e4a315f1f7379f272642e1eda4683f27ff6d1c1d0e1d3f956ecbb231ce9712571c9a5420d024dc5b90099e2ecf5d553fbd71b0be9e32a18c027b3bb1de3c4af1c918a3cc91cb06748f8a2a2beda806c5029fd1e340e843a58b964754f5001559b116db67d173d17714409baf21c7cbfb3f83abe3e07dce8c2c6a59f686bdcc48e89ebffebd0ce69122fbf483fb3542a342bd6be3469a78cb53902872c1ce21743b400c6da9fe19ff727a8af19bafd4ac27392a470155d5992dcc1a2024ca025f1313d0e066ce0daecaa732c9d62f839be37fe61a0aa0f5fa23162d67d49dee1d74dfa0ec1e42b261075288f06c6744e05343131613ebedf8b6fc70a78d28eb3581f955c870d98b009f0b730f67712ee9535bc60e3c374824c1d90fd3c51d587c8c0b5dbf6c36c8cc82d650280e568f7c7e6b2550a45657a646ca6a48c6c683dd8bb42bb7998a01ca6e4b283897478e7eb36bc465dd0d6f6716c1f199f2a21723f9affa29faafd35cf94720bafa6d1e8f0c8c10731a62adabcf1cb31532e97f0efd4a4153c808bdee100bf9cc5b595421f466a2dae9cde36d9e0f781d6d9e58d155f4a23aa09e257b9134c425f8fca6437979a0b101e88364fe5a7af725797b7c6c7fe2f5eab18966beeb7edd02817de5331fdf7f94e1ea9eb70aa4da258b88377124a344d9c9d2ed1e0535d0f1489f5d45fbeb223059f46ba5b4a1c216040cba81acf294ed316eed725877127ee98e70a3cc992f1bd3a18f3b19537f50f73dfc4a620de6739d6379bc2e9c26e416e38d20048072ca739307ac1cf8d2cc5348e0fab28bf78e897e2007e07a8d13b909b87e98b82be8b108a316ca9e0df0381f6311c96dbb9d7c3495ba08af960231da069105bcf8373a454218bb78ef421cc42b2950bce097f6be4da55d3b726288192c80adf8df967994c0594bcdc808a65b1d3aa8234495f03262e7c83b65b574535b7127d7e322f443a111d889b9361e56576a44d17234d36f97a59a09acbef174ab001863d363b93db5c118d1f58aceca5673e31e8c8c7b730d9aab9ea01f683edaf4dd07f9df4295268d368807af22bcdaad525995204a4966e620b63d71fab023e3bbf3f3eab2ca8cb99c889bec8138919474bcfffd29727c367dd3399ed483216c308c08876997969fe98660c4d234586cc0f0aeb58ce49a6a250d554a01439c340dd8afe36c72251c7887f7a5fefe9bb1c45128f573c1a7ae99ca058f2f1172cee7d7a9f2d5a0f66ec9dc74b35abe5611eeb5193f0ff6c82868d38745c19932964eb16146ef9cf5080f960248f665a4e0bc659269a833f31b7174550f87251e88ff0e004205674934e9522e17dca85d0b6b51c29306414cf832838426449d52e38ab7fbe4e27f2eb468af3c862e0071e5416c2bec21975dc1cad52d5eeef0cebd16ce084a7fd9111d12c90c3e684984cf9717a89804ce266b416c7104457626544e136b8da3af37c15127dbb6ed671ca3d6a1dea57429796838798b1d5a666bb163f441d1d7b83986eb4808b5271bf4461f7555d25a56a5abc5ca87b9642f8a5447f320f8b9e88a5f0bf7135946bbc54926a2c5d14259f48d838b06e1346f92584af37cfca6f2fcb102192afcbd2b5bd4ccce4b47665f5d24fae0c09b96e7de6a92618f9cc20792d5214bafda9eb283f512463feac50fa4e5729cb9bb52aee43d98e85e53724b5abdb98f748d1efa36d7f6ba9b8c769b1141e47f646fe1d34962b863890cd85859f86121d590ea7fb6b3906b4fe2a330247befdb11c4af5a812fee2102a570f1f0a98f82edd3ba0c2b66e05b64087cd2c0d948788e8091c3babca78a3a9ceba5d00ee50a928f6aacd06b25c0584eed4b54d1cb0dd6dd2b98772507aa1597e329fa923a2e0459e7b0da5edfe080bd54d552e5158b5770f3f210d14e0944a86780d3ec23dd69aa663edcdcaddd137b4220cebb0549691e197aaf714d1a8d889bcf1381062f778819d60417154ae0967f23397a943ba80f7fde879c60d555a4defcef46ab6ba592cfff449f6b31270c716c71c7e27685b11e3ae691cdb229ac6cea1c1d7d7a42a8a9ee60a89ec1edc21519f9e487bf0e93ae81b91ebfa0ad712d7cf9eb2e5922bf2e47e52817d19288f3a080c2dbf867a72a2d05f564f1b23f7f98383411e224182a543b4d85709aaad9640d722dd49264f8c8952a74f0ad696fc607aa3b76805b28eecf260e7a2d30de28ae02826920e72cbd806b2311b53ace0bffbd70f78404dd9d7db8913386372f40ebb567678ce35ab67df12cd83af09665e265ae21b9cfba78c1a7e8e6a149669dec2548a4d1af109c831af0195ac72a79e22fd2e0f05675361e76231bc001a215374bfa914cc1ee8597680b572cb85ea8aa14b2acf0df1b6414a701c6a7b00b84a8b511231509c24a438c929c39d0f4fbbb7dbf05dfcc7ce3740d3493936bf65167afa8745b77184c46bbac1bbe84c511dafc0da2abcbbf0a6675ecfae803d08a91f4cbeee4c9a6fcb28799a76e64908685a20e7bd30659be12283ba4ec773f148dbac0cbad76c71e81d425e3c40cf63421b7019261b16f3fa09bd5108d24048107fc299fd6723e624187899776f58938210f34680a1b56d37120c66304587ae287ef9892bc336f6ebd6be9a3e907292fea7b48454b36ff762d6e4c90d0a7d3574f2ade3ca24b837525793213738cff469cd12fdb343c4bf107b8eb485848027f5bad2db9be1bfefc5b262038a3a32baca76179fefb2472c8e467489c14719da19dcf901a1de4d13c3562b0566f0f40ef60dc827add8b489f26f169a6077bf1b3b6b0c72813e9471c64b127c21c3f2b19d27ddf1ffc755d1c535bf68cb23db7fe8c7f37a5b21baa4696d74b32afc700bfc14d607171b4b8eb9c1dc8b0b3efc1025e6818842ce131404fefda554149615b31fb350374475527c7209603b5e926f028a96610260033184e503c8281aa90fe6c36455c5f04ca239a69592c106aa609fafd07ac0f24486cd8e62288a273f0a32699d1bcaae687aaac42dc844ec26b3692084fdaba340f84a0925ef9fa406deb018aa16e97db2a52ab33e35f5451b59d592f4a50b260f9dc5c2adaa0831643f23ccca4b1ce9ba97cb4fc69b66fd2e417521ed906e245eae0ba114f739caae780073be149d9d86d92d42e49519fc5ad2d04a9716429fe27dbba170ac46d21f5e3e389a1b78e991f559297dce7c3ce546255dd0f1be1eb0ae4746ea3134500e652033f1c3874dd8fceed989df2f2ab4ba974d270757b440f0", @typed={0xc, 0xa, @u64=0x3b43}]}]}, 0x10fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001880)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) mount$fuse(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='fuse\x00', 0x40000, &(0x7f0000001a00)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@euid_lt={'euid<'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'Cpuacct.@tE\xae\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '+-'}}, {@permit_directio='permit_directio'}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, 'security.selinux\x00'}}]}}) 20:23:17 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="21069ef9613b5195b62138414c4f86b83c8258a90070dad7a9c4f85604f0a7b851caa6138c5b3af2c0e0d82b8a28f6a8c371292ea352077606da68f0932a50fe9409befb6442dcea23a2549bf6c50c38fe", 0x51}, {&(0x7f0000000140)="d9c43e18396403b0ba5de49103f60905494c8568c953e66badd80551f0bae0173614386671552126c0da984b0f1d427d730f09eff87358cd5e26e3c55631565c2c70a0da850d81c569a8b89bfa28b8808db00216519c685ce88873a3c2f7b452", 0xfffffffffffffd1b}, {&(0x7f0000002780)="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", 0x1000}], 0x1000000000000123}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ppoll(&(0x7f0000000540)=[{r4}], 0x1, 0x0, 0x0, 0xfffffffffffffdbb) r5 = open(0x0, 0x84080, 0x142) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022bbd7000ffdbdf25020000000c0a060001000000000000000c0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40600f0}, 0x2000c010) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000400)) clock_getres(0x6, &(0x7f0000000040)) [ 148.315822] audit: type=1400 audit(1568492597.735:41): avc: denied { relabelto } for pid=6927 comm="syz-executor.1" name="bus" dev="sda1" ino=16548 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 20:23:17 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) open(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}) mq_getsetattr(r0, &(0x7f0000000040), 0x0) [ 148.454822] audit: type=1400 audit(1568492597.745:42): avc: denied { read write } for pid=6927 comm="syz-executor.1" name="bus" dev="sda1" ino=16548 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 148.536829] audit: type=1400 audit(1568492597.745:43): avc: denied { open } for pid=6927 comm="syz-executor.1" path="/root/syzkaller-testdir154658082/syzkaller.qFQdk7/2/bus" dev="sda1" ino=16548 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 148.585035] audit: type=1400 audit(1568492597.925:44): avc: denied { relabelfrom } for pid=6927 comm="syz-executor.1" name="bus" dev="sda1" ino=16548 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 148.615408] audit: type=1400 audit(1568492597.955:45): avc: denied { getattr } for pid=6800 comm="syz-executor.1" path="/root/syzkaller-testdir154658082/syzkaller.qFQdk7/2/bus" dev="sda1" ino=16548 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 148.657357] audit: type=1400 audit(1568492597.955:46): avc: denied { unlink } for pid=6800 comm="syz-executor.1" name="bus" dev="sda1" ino=16548 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 148.695778] audit: type=1400 audit(1568492598.025:47): avc: denied { mounton } for pid=6936 comm="syz-executor.0" path="/root/syzkaller-testdir179630351/syzkaller.yx5lI4/2/bus" dev="sda1" ino=16541 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lvm_control_t:s0 tclass=file permissive=1 [ 148.734988] audit: type=1804 audit(1568492598.045:48): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir154658082/syzkaller.qFQdk7/3/file0/bus" dev="mqueue" ino=27071 res=1 [ 148.768433] audit: type=1400 audit(1568492598.095:49): avc: denied { read } for pid=6942 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 20:23:18 executing program 3: 20:23:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x80000000b}, 0xe) write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009040011000000000000010000000008000400030a0000", 0x24) 20:23:18 executing program 2: clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f0000000000)=0x2, 0x8b, 0x2, &(0x7f0000000100)={r0}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000014) 20:23:18 executing program 0: 20:23:18 executing program 1: 20:23:18 executing program 3: 20:23:18 executing program 1: 20:23:18 executing program 0: 20:23:18 executing program 4: 20:23:18 executing program 1: 20:23:18 executing program 5: 20:23:18 executing program 3: 20:23:18 executing program 0: 20:23:18 executing program 4: 20:23:21 executing program 2: 20:23:21 executing program 1: 20:23:21 executing program 0: 20:23:21 executing program 3: 20:23:21 executing program 4: 20:23:21 executing program 5: 20:23:21 executing program 3: 20:23:21 executing program 4: 20:23:21 executing program 1: 20:23:21 executing program 5: 20:23:21 executing program 0: 20:23:21 executing program 2: 20:23:21 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db25633657b52877baca0865a5b587ec8eaf0132a9dd256f453d6823a6593853de952b51f4462d98d016c3dac872a1ebaef04c2e848f2b4bc3e8e8bd50099d9de23f8e43bedb5cd90e6803288eeeac880", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 20:23:21 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f00000000c0)={0x0, 0xe7, {0x0, 0x6}}) 20:23:21 executing program 0: mkdirat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) socket(0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) 20:23:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 20:23:21 executing program 2: socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x67, 0x0, {0x0, 0x0, 0x5}}, 0x14) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = creat(0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) syz_open_procfs(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x100000000000002) 20:23:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="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", 0x947a}], 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000400)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4081000}, 0x80, 0x0}}, {{&(0x7f00000016c0)=@xdp={0x2c, 0x4, 0x0, 0x1b}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001840)}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=[@txtime={{0x18, 0x1, 0x3d, 0xe4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x48}}, {{&(0x7f0000001bc0)=@pppoe={0x18, 0x0, {0x1, @remote, 'veth1_to_bond\x00'}}, 0x80, 0x0}}, {{&(0x7f0000001f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x9}, 0x0, 0x4, 0x4, 0x2}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002000)="6c909fa35fb1557ecacce817ec7f9fe5a8924828375cc668690901e929b3b9b89d8817588b1ff9d1ae6a06a9c7393918f94bd2ec60", 0x35}, {0x0}, {0x0}], 0x3, &(0x7f00000022c0)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x3bc3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000023c0)="b18ea85f3afd4da20abc8f6eabf5a7d9d9f48032fded362d27d131494fdf967711bb63bd159076ae873266970a14e6115f066c11231585910b2e6bbb893cda11e474d1f257f17d010f8dc64a66ada4dfeef3e9f498f83c5ba303153acee4688f390f2e820cb8cb4930677c85247bbae6e54d79ba272d0127ac9635d73b4db602b6df0abf51bfb30b8448962ebca3c7f9f99c63b3e69553f7f822a5528e574f698ab5ec0fcd8e835519b4b49025831c20fd8613cde33e53de3eee61a38f", 0xbd}, {&(0x7f00000024c0)="b81f0e2352edcfa90d58ff8d5735a8d0db15a94406af1edf9a2b4721e99913ae4f4241237b67004a80f15660f25ba0d9b139ba8087a60a1b2f144698f3206144eceeb684c2d94cfe6f7b6d978318d34e847453c1ae737407d408a8fed44917f5938bce5f05dee8ce940a3cdbdfc5c4fb17921dfea9076cc950fdc5125ccd6c7062fd140d6bb2", 0x86}], 0x2}}], 0x6, 0x40) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="549b8012", 0x9b54}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 20:23:21 executing program 1: r0 = gettid() uname(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, 0x0) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9) r1 = gettid() tkill(r1, 0x1000000000016) syz_open_procfs$namespace(r1, 0x0) stat(0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = request_key(0x0, 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff9) stat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) keyctl$chown(0x4, r2, 0x0, 0x0) tkill(r0, 0x1000000000015) 20:23:21 executing program 3: write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)) 20:23:21 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001140)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 20:23:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') sendfile(r0, r1, 0x0, 0x320f) 20:23:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0xff, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x50000, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 152.492517] ================================================================== [ 152.500048] BUG: KASAN: use-after-free in tcp_ack+0x414f/0x4760 [ 152.506097] Read of size 4 at addr ffff8880a58530ac by task syz-executor.2/7052 [ 152.513524] [ 152.515140] CPU: 0 PID: 7052 Comm: syz-executor.2 Not tainted 4.14.143 #0 [ 152.522044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.531378] Call Trace: [ 152.533939] [ 152.536072] dump_stack+0x138/0x197 [ 152.539679] ? tcp_ack+0x414f/0x4760 [ 152.543371] print_address_description.cold+0x7c/0x1dc [ 152.548623] ? tcp_ack+0x414f/0x4760 [ 152.552320] kasan_report.cold+0xa9/0x2af [ 152.556447] __asan_report_load4_noabort+0x14/0x20 [ 152.561356] tcp_ack+0x414f/0x4760 [ 152.564889] ? tcp_fastretrans_alert+0x2620/0x2620 [ 152.569796] ? save_trace+0x290/0x290 [ 152.573574] ? tcp_parse_options+0x18f/0x9e0 [ 152.577969] tcp_rcv_established+0x3e9/0x1650 [ 152.582442] ? rt6_check_expired+0xa5/0x160 [ 152.586746] ? tcp_data_queue+0x3730/0x3730 [ 152.591043] ? ip6_dst_check+0x16a/0x2c0 [ 152.595085] tcp_v6_do_rcv+0x417/0x1190 [ 152.599040] tcp_v6_rcv+0x2446/0x2ed0 [ 152.602819] ? save_trace+0x290/0x290 [ 152.606607] ip6_input_finish+0x300/0x15a0 [ 152.610828] ip6_input+0xd5/0x340 [ 152.614261] ? ip6_input_finish+0x15a0/0x15a0 [ 152.618734] ? ipv6_rcv+0x16aa/0x1d20 [ 152.622513] ? ip6_rcv_finish+0x7a0/0x7a0 [ 152.626639] ip6_rcv_finish+0x23f/0x7a0 [ 152.630594] ipv6_rcv+0xe4d/0x1d20 [ 152.634114] ? put_prev_task_stop+0x34c/0x400 [ 152.638587] ? ip6_input+0x340/0x340 [ 152.642278] ? __lock_is_held+0xb6/0x140 [ 152.646316] ? check_preemption_disabled+0x3c/0x250 [ 152.651330] ? ip6_make_skb+0x410/0x410 [ 152.655286] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 152.660802] ? ip6_input+0x340/0x340 [ 152.664498] __netif_receive_skb_core+0x1eae/0x2ca0 [ 152.669635] ? trace_hardirqs_on+0x10/0x10 [ 152.673855] ? save_trace+0x1c0/0x290 [ 152.677633] ? enqueue_to_backlog+0xcc0/0xcc0 [ 152.682107] ? process_backlog+0x43e/0x730 [ 152.686408] ? lock_acquire+0x16f/0x430 [ 152.690363] __netif_receive_skb+0x2c/0x1b0 [ 152.694669] ? __netif_receive_skb+0x2c/0x1b0 [ 152.699146] process_backlog+0x21f/0x730 [ 152.703187] ? mark_held_locks+0xb1/0x100 [ 152.707315] net_rx_action+0x490/0xf80 [ 152.711185] ? napi_complete_done+0x4f0/0x4f0 [ 152.715658] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 152.721090] __do_softirq+0x244/0x9a0 [ 152.724873] ? ip6_finish_output2+0x9c0/0x21b0 [ 152.729437] do_softirq_own_stack+0x2a/0x40 [ 152.733761] [ 152.735980] do_softirq.part.0+0x10e/0x160 [ 152.740195] __local_bh_enable_ip+0x154/0x1a0 [ 152.744669] ip6_finish_output2+0x9f3/0x21b0 [ 152.749062] ? ip6_forward_finish+0x480/0x480 [ 152.753538] ? __lock_is_held+0xb6/0x140 [ 152.757588] ? check_preemption_disabled+0x3c/0x250 [ 152.762586] ip6_finish_output+0x4f4/0xb50 [ 152.766795] ? ip6_finish_output+0x4f4/0xb50 [ 152.771185] ip6_output+0x20f/0x6d0 [ 152.774790] ? ip6_finish_output+0xb50/0xb50 [ 152.779177] ? __lock_is_held+0xb6/0x140 [ 152.783214] ? check_preemption_disabled+0x3c/0x250 [ 152.788210] ? ip6_fragment+0x32c0/0x32c0 [ 152.792347] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 152.797777] ip6_xmit+0xd53/0x1eb0 [ 152.801301] ? ip6_finish_output2+0x21b0/0x21b0 [ 152.805950] ? save_trace+0x290/0x290 [ 152.809730] ? ip6_append_data+0x2f0/0x2f0 [ 152.813941] ? __lock_is_held+0xb6/0x140 [ 152.817977] ? check_preemption_disabled+0x3c/0x250 [ 152.822971] inet6_csk_xmit+0x286/0x4d0 [ 152.826933] ? inet6_csk_update_pmtu+0x140/0x140 [ 152.831671] ? tcp_md5_do_lookup+0x1d3/0x530 [ 152.836074] __tcp_transmit_skb+0x172c/0x2fe0 [ 152.840554] ? __tcp_select_window+0x6e0/0x6e0 [ 152.845114] ? kvm_clock_read+0x23/0x40 [ 152.849070] ? sched_clock_cpu+0x1b/0x1c0 [ 152.853197] ? kmem_cache_alloc_node_trace+0x379/0x770 [ 152.858454] ? tcp_small_queue_check+0x184/0x1e0 [ 152.863184] tcp_write_xmit+0x523/0x4960 [ 152.867310] ? tcp_v6_md5_lookup+0x23/0x30 [ 152.871521] ? tcp_established_options+0x2c5/0x420 [ 152.876442] ? tcp_current_mss+0x1b1/0x2f0 [ 152.880660] __tcp_push_pending_frames+0xa6/0x260 [ 152.885478] tcp_send_fin+0x17e/0xc40 [ 152.889258] tcp_close+0xcc8/0xfb0 [ 152.892776] ? lock_acquire+0x16f/0x430 [ 152.896727] ? ip_mc_drop_socket+0x1d6/0x230 [ 152.901113] inet_release+0xec/0x1c0 [ 152.904812] inet6_release+0x53/0x80 [ 152.908507] __sock_release+0xce/0x2b0 [ 152.912370] ? __sock_release+0x2b0/0x2b0 [ 152.916493] sock_close+0x1b/0x30 [ 152.920022] __fput+0x275/0x7a0 [ 152.923288] ____fput+0x16/0x20 [ 152.926544] task_work_run+0x114/0x190 [ 152.930410] exit_to_usermode_loop+0x1da/0x220 [ 152.934979] do_syscall_64+0x4bc/0x640 [ 152.938854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.943688] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 152.948853] RIP: 0033:0x4135d1 [ 152.952020] RSP: 002b:00007ffe3dc63920 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 152.959708] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004135d1 [ 152.966958] RDX: 0000001b2c420000 RSI: 0000000000000000 RDI: 0000000000000003 [ 152.974208] RBP: 0000000000000001 R08: 000000006e783fbb R09: 000000006e783fbf [ 152.981472] R10: 00007ffe3dc63a00 R11: 0000000000000293 R12: 000000000075bf20 [ 152.988728] R13: 00000000000253ab R14: 0000000000760930 R15: ffffffffffffffff [ 152.995980] [ 152.997586] Allocated by task 7053: [ 153.001191] save_stack_trace+0x16/0x20 [ 153.005144] save_stack+0x45/0xd0 [ 153.008574] kasan_kmalloc+0xce/0xf0 [ 153.012272] kasan_slab_alloc+0xf/0x20 [ 153.016136] kmem_cache_alloc_node+0x144/0x780 [ 153.020693] __alloc_skb+0x9c/0x500 [ 153.024296] sk_stream_alloc_skb+0xb3/0x780 [ 153.028593] tcp_sendmsg_locked+0xf61/0x3200 [ 153.032978] tcp_sendmsg+0x30/0x50 [ 153.036495] inet_sendmsg+0x122/0x500 [ 153.040289] sock_sendmsg+0xce/0x110 [ 153.043989] SYSC_sendto+0x206/0x310 [ 153.047678] SyS_sendto+0x40/0x50 [ 153.051108] do_syscall_64+0x1e8/0x640 [ 153.054973] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 153.060134] [ 153.061739] Freed by task 7053: [ 153.064994] save_stack_trace+0x16/0x20 [ 153.068941] save_stack+0x45/0xd0 [ 153.072366] kasan_slab_free+0x75/0xc0 [ 153.076242] kmem_cache_free+0x83/0x2b0 [ 153.080190] kfree_skbmem+0x8d/0x120 [ 153.083877] __kfree_skb+0x1e/0x30 [ 153.087391] tcp_remove_empty_skb.part.0+0x231/0x2e0 [ 153.092492] tcp_sendmsg_locked+0x1ced/0x3200 [ 153.096959] tcp_sendmsg+0x30/0x50 [ 153.100473] inet_sendmsg+0x122/0x500 [ 153.104245] sock_sendmsg+0xce/0x110 [ 153.107931] SYSC_sendto+0x206/0x310 [ 153.111619] SyS_sendto+0x40/0x50 [ 153.115048] do_syscall_64+0x1e8/0x640 [ 153.118912] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 153.124089] [ 153.125694] The buggy address belongs to the object at ffff8880a5853080 [ 153.125694] which belongs to the cache skbuff_fclone_cache of size 472 [ 153.139020] The buggy address is located 44 bytes inside of [ 153.139020] 472-byte region [ffff8880a5853080, ffff8880a5853258) [ 153.150781] The buggy address belongs to the page: [ 153.155683] page:ffffea00029614c0 count:1 mapcount:0 mapping:ffff8880a5853080 index:0x0 [ 153.163804] flags: 0x1fffc0000000100(slab) [ 153.168018] raw: 01fffc0000000100 ffff8880a5853080 0000000000000000 0000000100000006 [ 153.175876] raw: ffffea000247f020 ffffea00024e2b20 ffff88821b75f3c0 0000000000000000 [ 153.183728] page dumped because: kasan: bad access detected [ 153.189413] [ 153.191014] Memory state around the buggy address: [ 153.195929] ffff8880a5852f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.203262] ffff8880a5853000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.210595] >ffff8880a5853080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.217925] ^ [ 153.222567] ffff8880a5853100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.229910] ffff8880a5853180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.237252] ================================================================== [ 153.244592] Disabling lock debugging due to kernel taint [ 153.250052] Kernel panic - not syncing: panic_on_warn set ... [ 153.250052] [ 153.257407] CPU: 0 PID: 7052 Comm: syz-executor.2 Tainted: G B 4.14.143 #0 [ 153.265532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.266935] kobject: 'loop1' (ffff8880a49bef60): kobject_uevent_env [ 153.274868] Call Trace: [ 153.274872] [ 153.274882] dump_stack+0x138/0x197 [ 153.274890] ? tcp_ack+0x414f/0x4760 [ 153.274896] panic+0x1f2/0x426 [ 153.274901] ? add_taint.cold+0x16/0x16 [ 153.274913] kasan_end_report+0x47/0x4f [ 153.274918] kasan_report.cold+0x130/0x2af [ 153.274927] __asan_report_load4_noabort+0x14/0x20 [ 153.290051] kobject: 'loop1' (ffff8880a49bef60): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 153.293341] tcp_ack+0x414f/0x4760 [ 153.293356] ? tcp_fastretrans_alert+0x2620/0x2620 [ 153.293366] ? save_trace+0x290/0x290 [ 153.335179] ? tcp_parse_options+0x18f/0x9e0 [ 153.339569] tcp_rcv_established+0x3e9/0x1650 [ 153.344042] ? rt6_check_expired+0xa5/0x160 [ 153.348339] ? tcp_data_queue+0x3730/0x3730 [ 153.352635] ? ip6_dst_check+0x16a/0x2c0 [ 153.356671] tcp_v6_do_rcv+0x417/0x1190 [ 153.360621] tcp_v6_rcv+0x2446/0x2ed0 [ 153.364405] ? save_trace+0x290/0x290 [ 153.368217] ip6_input_finish+0x300/0x15a0 [ 153.372430] ip6_input+0xd5/0x340 [ 153.375868] ? ip6_input_finish+0x15a0/0x15a0 [ 153.380335] ? ipv6_rcv+0x16aa/0x1d20 [ 153.384109] ? ip6_rcv_finish+0x7a0/0x7a0 [ 153.388234] ip6_rcv_finish+0x23f/0x7a0 [ 153.392182] ipv6_rcv+0xe4d/0x1d20 [ 153.395695] ? put_prev_task_stop+0x34c/0x400 [ 153.400165] ? ip6_input+0x340/0x340 [ 153.403851] ? __lock_is_held+0xb6/0x140 [ 153.407890] ? check_preemption_disabled+0x3c/0x250 [ 153.412885] ? ip6_make_skb+0x410/0x410 [ 153.417006] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 153.422430] ? ip6_input+0x340/0x340 [ 153.426120] __netif_receive_skb_core+0x1eae/0x2ca0 [ 153.431137] ? trace_hardirqs_on+0x10/0x10 [ 153.435345] ? save_trace+0x1c0/0x290 [ 153.439121] ? enqueue_to_backlog+0xcc0/0xcc0 [ 153.443591] ? process_backlog+0x43e/0x730 [ 153.447803] ? lock_acquire+0x16f/0x430 [ 153.451756] __netif_receive_skb+0x2c/0x1b0 [ 153.456053] ? __netif_receive_skb+0x2c/0x1b0 [ 153.460524] process_backlog+0x21f/0x730 [ 153.464563] ? mark_held_locks+0xb1/0x100 [ 153.468686] net_rx_action+0x490/0xf80 [ 153.472549] ? napi_complete_done+0x4f0/0x4f0 [ 153.477021] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 153.482451] __do_softirq+0x244/0x9a0 [ 153.486229] ? ip6_finish_output2+0x9c0/0x21b0 [ 153.490784] do_softirq_own_stack+0x2a/0x40 [ 153.495076] [ 153.497289] do_softirq.part.0+0x10e/0x160 [ 153.501497] __local_bh_enable_ip+0x154/0x1a0 [ 153.505980] ip6_finish_output2+0x9f3/0x21b0 [ 153.510363] ? ip6_forward_finish+0x480/0x480 [ 153.514833] ? __lock_is_held+0xb6/0x140 [ 153.518879] ? check_preemption_disabled+0x3c/0x250 [ 153.523868] ip6_finish_output+0x4f4/0xb50 [ 153.528082] ? ip6_finish_output+0x4f4/0xb50 [ 153.532465] ip6_output+0x20f/0x6d0 [ 153.536065] ? ip6_finish_output+0xb50/0xb50 [ 153.540445] ? __lock_is_held+0xb6/0x140 [ 153.544481] ? check_preemption_disabled+0x3c/0x250 [ 153.549478] ? ip6_fragment+0x32c0/0x32c0 [ 153.553599] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 153.559027] ip6_xmit+0xd53/0x1eb0 [ 153.562544] ? ip6_finish_output2+0x21b0/0x21b0 [ 153.567188] ? save_trace+0x290/0x290 [ 153.570963] ? ip6_append_data+0x2f0/0x2f0 [ 153.575172] ? __lock_is_held+0xb6/0x140 [ 153.579210] ? check_preemption_disabled+0x3c/0x250 [ 153.584204] inet6_csk_xmit+0x286/0x4d0 [ 153.588163] ? inet6_csk_update_pmtu+0x140/0x140 [ 153.592890] ? tcp_md5_do_lookup+0x1d3/0x530 [ 153.597277] __tcp_transmit_skb+0x172c/0x2fe0 [ 153.601751] ? __tcp_select_window+0x6e0/0x6e0 [ 153.606308] ? kvm_clock_read+0x23/0x40 [ 153.610258] ? sched_clock_cpu+0x1b/0x1c0 [ 153.614384] ? kmem_cache_alloc_node_trace+0x379/0x770 [ 153.619643] ? tcp_small_queue_check+0x184/0x1e0 [ 153.624377] tcp_write_xmit+0x523/0x4960 [ 153.628427] ? tcp_v6_md5_lookup+0x23/0x30 [ 153.632637] ? tcp_established_options+0x2c5/0x420 [ 153.637543] ? tcp_current_mss+0x1b1/0x2f0 [ 153.641758] __tcp_push_pending_frames+0xa6/0x260 [ 153.646576] tcp_send_fin+0x17e/0xc40 [ 153.650352] tcp_close+0xcc8/0xfb0 [ 153.653869] ? lock_acquire+0x16f/0x430 [ 153.657817] ? ip_mc_drop_socket+0x1d6/0x230 [ 153.662210] inet_release+0xec/0x1c0 [ 153.665916] inet6_release+0x53/0x80 [ 153.669608] __sock_release+0xce/0x2b0 [ 153.673469] ? __sock_release+0x2b0/0x2b0 [ 153.677590] sock_close+0x1b/0x30 [ 153.681022] __fput+0x275/0x7a0 [ 153.684279] ____fput+0x16/0x20 [ 153.687535] task_work_run+0x114/0x190 [ 153.691399] exit_to_usermode_loop+0x1da/0x220 [ 153.695974] do_syscall_64+0x4bc/0x640 [ 153.699840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.704664] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 153.709837] RIP: 0033:0x4135d1 [ 153.713002] RSP: 002b:00007ffe3dc63920 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 153.720686] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004135d1 [ 153.727932] RDX: 0000001b2c420000 RSI: 0000000000000000 RDI: 0000000000000003 [ 153.735181] RBP: 0000000000000001 R08: 000000006e783fbb R09: 000000006e783fbf [ 153.742429] R10: 00007ffe3dc63a00 R11: 0000000000000293 R12: 000000000075bf20 [ 153.749685] R13: 00000000000253ab R14: 0000000000760930 R15: ffffffffffffffff [ 153.758084] Kernel Offset: disabled [ 153.761700] Rebooting in 86400 seconds..