[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.789674] random: sshd: uninitialized urandom read (32 bytes read) [ 32.059523] kauditd_printk_skb: 9 callbacks suppressed [ 32.059533] audit: type=1400 audit(1568277969.726:35): avc: denied { map } for pid=6892 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.108660] random: sshd: uninitialized urandom read (32 bytes read) [ 32.695497] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. [ 38.297412] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/12 08:46:16 fuzzer started [ 38.492278] audit: type=1400 audit(1568277976.166:36): avc: denied { map } for pid=6902 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.023579] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/12 08:46:17 dialing manager at 10.128.0.105:43641 2019/09/12 08:46:22 syscalls: 2466 2019/09/12 08:46:22 code coverage: enabled 2019/09/12 08:46:22 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/12 08:46:22 extra coverage: extra coverage is not supported by the kernel 2019/09/12 08:46:22 setuid sandbox: enabled 2019/09/12 08:46:22 namespace sandbox: enabled 2019/09/12 08:46:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/12 08:46:22 fault injection: enabled 2019/09/12 08:46:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/12 08:46:22 net packet injection: enabled 2019/09/12 08:46:22 net device setup: enabled [ 46.107518] random: crng init done 08:47:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/158, 0x45) getdents64(r1, &(0x7f0000000400)=""/163, 0xa3) 08:47:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:47:31 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e5, &(0x7f00000003c0)={'syz_tun\x00'}) 08:47:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0) 08:47:31 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0xfffffe3f, 0xfff, 0x6, 0x40, 0x1000, 0x0, 0x5, 0x200, 0x0, 0xfffffffffffffffe, 0xd9df, 0x0, 0x4, 0x0, 0x1000, 0x2, 0x6, 0x9, 0x3, 0x0, 0x7, 0x800, 0x4a96, 0x0, 0x0, 0x5, 0x10004, 0x80000000, 0x8000, 0x0, 0x9, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000200)}, 0x8008, 0x5, 0x0, 0x0, 0x4, 0x1, 0xfff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)) r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x2, 0x8001, 0x1f, 0x0, 0x0, 0x9, 0x0, 0x3, 0x1, 0x395, 0x0, 0x1d8, 0xfffffffffffffffd, 0x0, 0x100000001, 0x15, 0xcb, 0x8, 0x5, 0x0, 0x7, 0x7, 0xc361, 0x800, 0x0, 0xfffffffffffffffa, 0x7f, 0x8, 0x329, 0x6ef, 0xc00000000000000, 0x9, 0x1d, 0x401, 0x9, 0x0, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000100)}, 0x2000, 0x4, 0x0, 0x4, 0x7f, 0xc511, 0x5a64}, r2, 0xb, r1, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x81, 0x7, 0x8, 0x5, 0x0, 0x0, 0x0, 0x100000001, 0xacf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7fff, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x5}, 0x4008, 0xfffffffffffff13d, 0x6da7, 0x0, 0x3, 0x1, 0x1}, 0x0, 0x2, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fwL-t\xfc\xaa\x12m\x03\xb9bM\xba\xf1\x02\xf9\xcc`rtA\xa6\x9d\x86\xfc\xd2\x8d\xb6L\xc7Nw\xf9UU#8\xa1\xb7\v\xa4yu\xbc\xb9FnRHm\xf7\xf62B\xf3\xc5\xdbi\x82\xe5\x13\xcd<=_\x88\t\x9c\xd5@\xb5\x8b\xdet\xd1\xa1\x040/eH\xba\xabL\x87Zvy\b4\tqT,[\x852\xc4Yf\xdc]\xcc\x18h\xf2\xbf)\x8eg\f\"-\x1a\x99\x0e\xc3\x1cg\xd2\x8f\xb8\xc9P\x05\xdb\xb6\x1a;]\xa2\xb3\xe1J\xba\xcbK\xe2x\xae9\x85\xc8F\xb4b\'', 0x2761, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) r6 = socket$kcm(0x11, 0x3, 0x300) close(r6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000006740)={&(0x7f0000005240)=@hci, 0x80, &(0x7f0000006680)=[{&(0x7f00000052c0)=""/71, 0x47}, {&(0x7f0000005340)}, {&(0x7f0000005380)=""/222, 0xde}, {&(0x7f0000005540)=""/9, 0x9}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/234, 0xea}], 0x6}, 0x1) socket$kcm(0xa, 0x0, 0x11) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) socket$kcm(0x29, 0x7, 0x0) 08:47:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) poll(&(0x7f0000000480)=[{r1}], 0x1, 0x0) [ 113.604718] audit: type=1400 audit(1568278051.276:37): avc: denied { map } for pid=6902 comm="syz-fuzzer" path="/root/syzkaller-shm114478357" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 113.650409] audit: type=1400 audit(1568278051.306:38): avc: denied { map } for pid=6920 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=24 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 113.980920] IPVS: ftp: loaded support on port[0] = 21 [ 114.823250] chnl_net:caif_netlink_parms(): no params data found [ 114.832275] IPVS: ftp: loaded support on port[0] = 21 [ 114.861526] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.868395] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.876030] device bridge_slave_0 entered promiscuous mode [ 114.885930] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.892441] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.899792] device bridge_slave_1 entered promiscuous mode [ 114.925239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 114.934291] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 114.959738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 114.967122] team0: Port device team_slave_0 added [ 114.973068] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 114.980320] team0: Port device team_slave_1 added [ 114.987458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 114.997844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 115.009186] IPVS: ftp: loaded support on port[0] = 21 [ 115.072170] device hsr_slave_0 entered promiscuous mode [ 115.120570] device hsr_slave_1 entered promiscuous mode [ 115.194402] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 115.201580] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 115.234016] chnl_net:caif_netlink_parms(): no params data found [ 115.264072] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.270525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.277374] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.283846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.328431] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.335345] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.342803] device bridge_slave_0 entered promiscuous mode [ 115.349623] IPVS: ftp: loaded support on port[0] = 21 [ 115.373215] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.379595] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.386776] device bridge_slave_1 entered promiscuous mode [ 115.406678] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 115.415024] chnl_net:caif_netlink_parms(): no params data found [ 115.430230] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 115.455041] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.462541] team0: Port device team_slave_0 added [ 115.472890] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.479975] team0: Port device team_slave_1 added [ 115.498062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 115.509019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 115.562395] device hsr_slave_0 entered promiscuous mode [ 115.600390] device hsr_slave_1 entered promiscuous mode [ 115.641338] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 115.648865] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 115.659993] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.666717] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.673673] device bridge_slave_0 entered promiscuous mode [ 115.680434] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.686785] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.693748] device bridge_slave_1 entered promiscuous mode [ 115.719703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 115.732816] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.739186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.745911] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.752304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.753673] IPVS: ftp: loaded support on port[0] = 21 [ 115.763315] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 115.770512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.779156] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 115.797606] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.805808] team0: Port device team_slave_0 added [ 115.813880] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.821123] team0: Port device team_slave_1 added [ 115.828398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 115.835825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 115.843865] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 115.863226] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.870324] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.877217] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 115.886667] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.893278] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.903314] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 115.952093] device hsr_slave_0 entered promiscuous mode [ 116.010327] device hsr_slave_1 entered promiscuous mode [ 116.090757] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 116.099476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.106565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.116046] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 116.123098] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.132729] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 116.155599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 116.173095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.181000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.188663] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.195182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.205594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 116.242905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.250836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.259334] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.265727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.275484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 116.289293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 116.298203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.306337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.322411] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 116.333685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 116.341796] chnl_net:caif_netlink_parms(): no params data found [ 116.360928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.368647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.379652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 116.389787] IPVS: ftp: loaded support on port[0] = 21 [ 116.407666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.414755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.423008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.433081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 116.459345] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.466721] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.474477] device bridge_slave_0 entered promiscuous mode [ 116.481829] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.488184] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.495569] device bridge_slave_1 entered promiscuous mode [ 116.501883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.509429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.518963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 116.544900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.552925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.568201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.586347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 116.599097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 116.616385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.626484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.641666] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 116.647843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.675766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.682888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.697429] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 116.705445] team0: Port device team_slave_0 added [ 116.711587] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 116.718838] team0: Port device team_slave_1 added [ 116.726576] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.766729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 116.775359] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 116.783928] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.793434] chnl_net:caif_netlink_parms(): no params data found [ 116.811629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.827591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 116.864374] device hsr_slave_0 entered promiscuous mode [ 116.900434] device hsr_slave_1 entered promiscuous mode [ 116.971010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 116.978258] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 116.985686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.994217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.001989] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.008308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.017054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 117.024740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 117.037017] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 117.048527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.058289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.064969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.073021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.081825] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.088173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.095410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.102751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.112091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 117.121334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 117.143387] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 117.149469] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.159349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.168235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.178486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 117.196974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 117.209490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.217269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.225382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.233217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.240938] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.247273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.288943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 117.306991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.315470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.322902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.336706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.347306] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.353747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.365884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 117.374088] chnl_net:caif_netlink_parms(): no params data found [ 117.388671] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.397139] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.404765] device bridge_slave_0 entered promiscuous mode [ 117.412025] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.418455] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.425910] device bridge_slave_1 entered promiscuous mode [ 117.432367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 08:47:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/158, 0x45) getdents64(r1, &(0x7f0000000400)=""/163, 0xa3) [ 117.440520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.450350] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 117.458052] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 117.471388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 117.481458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 117.505692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.514415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.531084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.538990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.549391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 08:47:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/158, 0x45) getdents64(r1, &(0x7f0000000400)=""/163, 0xa3) [ 117.561741] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 117.572572] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 117.587567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.601507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 08:47:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/158, 0x45) getdents64(r1, &(0x7f0000000400)=""/163, 0xa3) [ 117.625653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 117.636048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 117.667815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.676866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.688134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.699181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.707470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.717160] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 117.723964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.735770] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 117.743133] team0: Port device team_slave_0 added [ 117.755069] bridge0: port 1(bridge_slave_0) entered blocking state 08:47:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000280)) [ 117.763756] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.771236] device bridge_slave_0 entered promiscuous mode [ 117.783859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 117.800625] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 117.808626] team0: Port device team_slave_1 added 08:47:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000280)) [ 117.816223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.824220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.837060] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.844704] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.852435] device bridge_slave_1 entered promiscuous mode [ 117.861367] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 08:47:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000280)) [ 117.870967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 117.878201] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 117.892331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.899908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.912094] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 08:47:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000280)) [ 117.918163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.931373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.940889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 117.957098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.008032] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 118.019826] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.031190] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 118.063034] device hsr_slave_0 entered promiscuous mode [ 118.100792] device hsr_slave_1 entered promiscuous mode [ 118.141937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 118.149748] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 118.158848] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 118.184778] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 118.192272] team0: Port device team_slave_0 added [ 118.197855] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 118.207275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.214544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.224389] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 118.230862] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.238763] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 118.246525] team0: Port device team_slave_1 added [ 118.252447] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 118.259994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 118.275127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.296727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 08:47:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) preadv(r0, &(0x7f0000003400)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0) [ 118.330605] audit: type=1400 audit(1568278056.006:39): avc: denied { map } for pid=6989 comm="syz-executor.5" path="/dev/v4l-subdev0" dev="devtmpfs" ino=15521 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 118.366511] device hsr_slave_0 entered promiscuous mode [ 118.400622] device hsr_slave_1 entered promiscuous mode [ 118.450825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.458734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.469307] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.475717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.485753] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 118.494058] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 118.501382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.509876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.524545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.538142] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 118.549466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.557378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.565893] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.572296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.582530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.592547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.610786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.620293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 118.629598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 118.639137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.651785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.660532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.668323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.678392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 118.696745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 08:47:36 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e5, &(0x7f00000003c0)={'syz_tun\x00'}) [ 118.707528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.715015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.727845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.747275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 118.770461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.778222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.789995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.799627] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 118.806279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.814650] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.829031] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 118.839636] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 118.845907] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.852356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.859318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.870010] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 118.882362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.904867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.913705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.927565] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.934522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.943093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.950969] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.957336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.965778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.979127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.992210] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 118.998637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.006552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.016982] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.023589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.031019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.038114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.047624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.062181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.075554] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 119.081755] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.093735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.101419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.111649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 119.121340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 119.131208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.139084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.147486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.155787] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.162164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.169622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.177671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.185573] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.191980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.199305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.209359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.220339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.229238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.236894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.244080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.252075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.259698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.268280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.276437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.289347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.313413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 119.324273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.332249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.344321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.357233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 119.367023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.381494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.391406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.399192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.407682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.417772] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 119.424237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.434740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.445492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.453933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.466416] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 119.475664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 119.486041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 119.494773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.502499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.509987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.517807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.527602] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 119.534193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.545357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.563946] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 119.576458] 8021q: adding VLAN 0 to HW filter on device batadv0 08:47:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0) 08:47:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) preadv(r0, &(0x7f0000003400)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0) [ 120.567867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.626139] sp0: Synchronizing with TNC [ 120.629990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.744533] sp0: Synchronizing with TNC 08:47:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) poll(&(0x7f0000000480)=[{r1}], 0x1, 0x0) 08:47:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:47:38 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e5, &(0x7f00000003c0)={'syz_tun\x00'}) 08:47:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 08:47:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) preadv(r0, &(0x7f0000003400)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0) 08:47:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0) 08:47:38 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e5, &(0x7f00000003c0)={'syz_tun\x00'}) [ 120.862673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.878600] hrtimer: interrupt took 36194 ns 08:47:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) preadv(r0, &(0x7f0000003400)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0) [ 120.933457] sp0: Synchronizing with TNC 08:47:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:47:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 08:47:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) poll(&(0x7f0000000480)=[{r1}], 0x1, 0x0) 08:47:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0) 08:47:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 121.150496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:47:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 121.265913] sp0: Synchronizing with TNC 08:47:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 08:47:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) poll(&(0x7f0000000480)=[{r1}], 0x1, 0x0) [ 121.570624] sp0: Synchronizing with TNC 08:47:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:']) 08:47:43 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 08:47:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002a0007031dfffd946fa2830020200a0009000000000000000004000000000000280000001100ffffba16a0aa1c0009e3966cf055d90f15a322e029eee7f817c37218fea642ef6b2c", 0x2e9}], 0x1}, 0x0) 08:47:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x0, 0x0) 08:47:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) listen(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) pipe(0x0) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9ee6}, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) ftruncate(r2, 0x48280) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0x1000003ab) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{}, "e05992dd5b0b1830", "30a7ff5ca1ddae0f832c0402a75b6459", "d27f00d8", "7f1a895987fc6ef6"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x2, 0x80000) close(0xffffffffffffffff) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 08:47:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "57b129065a3f6353520a8be2dacf971e99d82e1a186d41f8653b0eaba3035f0c"}) 08:47:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x0, 0x0) 08:47:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "57b129065a3f6353520a8be2dacf971e99d82e1a186d41f8653b0eaba3035f0c"}) 08:47:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002a0007031dfffd946fa2830020200a0009000000000000000004000000000000280000001100ffffba16a0aa1c0009e3966cf055d90f15a322e029eee7f817c37218fea642ef6b2c", 0x2e9}], 0x1}, 0x0) [ 125.874172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.875459] overlayfs: empty lowerdir [ 125.894820] audit: type=1804 audit(1568278063.566:40): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/4/bus" dev="sda1" ino=16562 res=1 08:47:43 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 08:47:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x0, 0x0) 08:47:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:']) [ 125.983098] audit: type=1804 audit(1568278063.636:41): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/4/bus" dev="sda1" ino=16562 res=1 08:47:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "57b129065a3f6353520a8be2dacf971e99d82e1a186d41f8653b0eaba3035f0c"}) 08:47:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x0, 0x0) 08:47:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002a0007031dfffd946fa2830020200a0009000000000000000004000000000000280000001100ffffba16a0aa1c0009e3966cf055d90f15a322e029eee7f817c37218fea642ef6b2c", 0x2e9}], 0x1}, 0x0) [ 126.031704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.037197] overlayfs: empty lowerdir [ 126.071611] syz-executor.5 (7164) used greatest stack depth: 24064 bytes left 08:47:43 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') [ 126.100717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.115577] audit: type=1804 audit(1568278063.726:42): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/4/bus" dev="sda1" ino=16562 res=1 08:47:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) listen(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) pipe(0x0) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9ee6}, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) ftruncate(r2, 0x48280) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0x1000003ab) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{}, "e05992dd5b0b1830", "30a7ff5ca1ddae0f832c0402a75b6459", "d27f00d8", "7f1a895987fc6ef6"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x2, 0x80000) close(0xffffffffffffffff) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 08:47:43 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 08:47:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "57b129065a3f6353520a8be2dacf971e99d82e1a186d41f8653b0eaba3035f0c"}) 08:47:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:']) 08:47:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) 08:47:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="240000002a0007031dfffd946fa2830020200a0009000000000000000004000000000000280000001100ffffba16a0aa1c0009e3966cf055d90f15a322e029eee7f817c37218fea642ef6b2c", 0x2e9}], 0x1}, 0x0) [ 126.154472] audit: type=1804 audit(1568278063.736:43): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/4/bus" dev="sda1" ino=16562 res=1 [ 126.269704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.284433] overlayfs: empty lowerdir [ 126.299932] input: syz1 as /devices/virtual/input/input5 08:47:44 executing program 3: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000000)) 08:47:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(r1) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:47:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendfile(r0, r2, 0x0, 0x20020102000007) sendfile(r0, r2, 0x0, 0x100000000) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 08:47:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:']) 08:47:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) 08:47:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(r1) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 126.472039] audit: type=1804 audit(1568278064.146:44): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/5/bus" dev="sda1" ino=16566 res=1 [ 126.499736] overlayfs: empty lowerdir [ 126.510777] input: syz1 as /devices/virtual/input/input7 [ 126.613496] audit: type=1804 audit(1568278064.266:45): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/5/bus" dev="sda1" ino=16566 res=1 08:47:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(r1) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:47:44 executing program 3: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000000)) 08:47:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) 08:47:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) 08:47:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) listen(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) pipe(0x0) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9ee6}, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) ftruncate(r2, 0x48280) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0x1000003ab) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{}, "e05992dd5b0b1830", "30a7ff5ca1ddae0f832c0402a75b6459", "d27f00d8", "7f1a895987fc6ef6"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x2, 0x80000) close(0xffffffffffffffff) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 08:47:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(r1) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:47:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) [ 126.836872] input: syz1 as /devices/virtual/input/input8 [ 126.874107] input: syz1 as /devices/virtual/input/input9 08:47:44 executing program 3: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000000)) [ 126.972578] audit: type=1804 audit(1568278064.646:46): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/6/bus" dev="sda1" ino=16550 res=1 [ 127.011926] input: syz1 as /devices/virtual/input/input10 [ 127.056963] audit: type=1804 audit(1568278064.716:47): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/6/bus" dev="sda1" ino=16550 res=1 08:47:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendfile(r0, r2, 0x0, 0x20020102000007) sendfile(r0, r2, 0x0, 0x100000000) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 08:47:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) 08:47:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 08:47:44 executing program 3: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000000)) 08:47:44 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171a094721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda8700000000020001000000ff0f7f00000080ffffff05000500000000000a000000def7bd3e10c05ce0fe800000200000003692daa9928f87cbe5a7b1ee1466"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40002c0, 0x0) 08:47:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) listen(r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "2c503327b7d1ed8572093b931ca822f9eb7d2ce0aed5e1146f52811ad5433ed4539431ef513b596953c8ff8a328f113acac88b9d0a7c5a758ebf6ba05295b4421073deefc9ef4be0795cd619b9ba3715f9304ae31a732b45f3089988f60e76c7fb39e2480a609b45677fb38bef84b7e1b8e5b0cf0b971bc8a8c9d4a45efa3e91837af9943c5431f2e58dff414f6d43ceb127c14cf1653fdb4eee2b26e66c98ec279a95aced4d35e1d72b5a5ff9a110ee728c2f809d1036ad4ddbbac3fbdead34bf2baf4eb2fbc5741dc7fed466931b584c2a81b7de267b9e19a8c83af3ec0fd44a8692462a4f19876e3c6a18b81717d4b9757ea5d2ed3bed79d93ebb6de7647d"}}}, 0x128) pipe(0x0) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9ee6}, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) ftruncate(r2, 0x48280) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0x1000003ab) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{}, "e05992dd5b0b1830", "30a7ff5ca1ddae0f832c0402a75b6459", "d27f00d8", "7f1a895987fc6ef6"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x2, 0x80000) close(0xffffffffffffffff) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 08:47:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendfile(r0, r2, 0x0, 0x20020102000007) sendfile(r0, r2, 0x0, 0x100000000) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) [ 127.310758] input: syz1 as /devices/virtual/input/input11 08:47:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 08:47:45 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171a094721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda8700000000020001000000ff0f7f00000080ffffff05000500000000000a000000def7bd3e10c05ce0fe800000200000003692daa9928f87cbe5a7b1ee1466"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40002c0, 0x0) 08:47:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 08:47:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xfa\xff\xff\xff\x00'}, 0x45c) 08:47:45 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171a094721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda8700000000020001000000ff0f7f00000080ffffff05000500000000000a000000def7bd3e10c05ce0fe800000200000003692daa9928f87cbe5a7b1ee1466"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40002c0, 0x0) [ 127.458671] audit: type=1804 audit(1568278065.126:48): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/7/bus" dev="sda1" ino=16566 res=1 [ 127.547009] input: syz1 as /devices/virtual/input/input12 [ 127.559106] audit: type=1804 audit(1568278065.226:49): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir837533194/syzkaller.hoHcOk/7/bus" dev="sda1" ino=16566 res=1 08:47:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendfile(r0, r2, 0x0, 0x20020102000007) sendfile(r0, r2, 0x0, 0x100000000) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 08:47:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 08:47:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80020d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004100800418e00000004fcff", 0x58}], 0x1) 08:47:45 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171a094721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e73a871a86cc8c8dda8700000000020001000000ff0f7f00000080ffffff05000500000000000a000000def7bd3e10c05ce0fe800000200000003692daa9928f87cbe5a7b1ee1466"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40002c0, 0x0) 08:47:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local}}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@local}, {@in6=@remote, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}]}, 0xac}}, 0x0) 08:47:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80020d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004100800418e00000004fcff", 0x58}], 0x1) 08:47:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db25633657b52877baca0865a5b", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:47:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80020d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004100800418e00000004fcff", 0x58}], 0x1) 08:47:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local}}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@local}, {@in6=@remote, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}]}, 0xac}}, 0x0) 08:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") syz_emit_ethernet(0x140, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x28, 0x8dfffffffffffff5, 0x0, 0xfe03, 0x0, 0x5800000000000000, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3819, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 08:47:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendfile(r0, r2, 0x0, 0x20020102000007) sendfile(r0, r2, 0x0, 0x100000000) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 08:47:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80020d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004100800418e00000004fcff", 0x58}], 0x1) 08:47:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendfile(r0, r2, 0x0, 0x20020102000007) sendfile(r0, r2, 0x0, 0x100000000) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 08:47:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local}}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@local}, {@in6=@remote, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}]}, 0xac}}, 0x0) 08:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") syz_emit_ethernet(0x140, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x28, 0x8dfffffffffffff5, 0x0, 0xfe03, 0x0, 0x5800000000000000, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3819, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 08:47:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) readlink(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="f255a86d472f9765d75320b9f02fbd07", 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x7, 0x2, [0xbc5, 0x0]}, 0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000600)='./file0\x00', 0x9) creat(0x0, 0x0) 08:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") syz_emit_ethernet(0x140, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x28, 0x8dfffffffffffff5, 0x0, 0xfe03, 0x0, 0x5800000000000000, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3819, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 08:47:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local}}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@local}, {@in6=@remote, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}]}, 0xac}}, 0x0) 08:47:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0ff4622993109aa4c1a2d23999eb00ea368db25633657b52877baca0865a5b", 0x61}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:47:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0xf360ebf4bcda487c}, 0x98) 08:47:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") syz_emit_ethernet(0x140, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x28, 0x8dfffffffffffff5, 0x0, 0xfe03, 0x0, 0x5800000000000000, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3819, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}}}}}}}}, 0x0) 08:47:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) readlink(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="f255a86d472f9765d75320b9f02fbd07", 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x7, 0x2, [0xbc5, 0x0]}, 0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000600)='./file0\x00', 0x9) creat(0x0, 0x0) 08:47:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendfile(r0, r2, 0x0, 0x20020102000007) sendfile(r0, r2, 0x0, 0x100000000) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) 08:47:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) readlink(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="f255a86d472f9765d75320b9f02fbd07", 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x7, 0x2, [0xbc5, 0x0]}, 0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000600)='./file0\x00', 0x9) creat(0x0, 0x0) 08:47:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0xf360ebf4bcda487c}, 0x98) 08:47:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0xf360ebf4bcda487c}, 0x98) 08:47:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0xf360ebf4bcda487c}, 0x98) [ 236.070042] INFO: rcu_preempt detected stalls on CPUs/tasks: [ 236.076245] 0-...: (1 GPs behind) idle=e62/1/0 softirq=11748/11750 fqs=5249 [ 236.083747] (detected by 1, t=10502 jiffies, g=1824, c=1823, q=1788) [ 236.090362] Sending NMI from CPU 1 to CPUs 0: [ 236.095885] NMI backtrace for cpu 0 [ 236.095889] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.143 #0 [ 236.095893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.095895] task: ffffffff87676240 task.stack: ffffffff87600000 [ 236.095898] RIP: 0010:__list_del_entry_valid+0xb3/0xf5 [ 236.095900] RSP: 0018:ffff8880aee07118 EFLAGS: 00000246 [ 236.095905] RAX: dffffc0000000000 RBX: ffff8880823b0af8 RCX: 0000000000000000 [ 236.095908] RDX: 1ffff11010476173 RSI: ffff8880823b0b90 RDI: ffff8880823b0b98 [ 236.095911] RBP: ffff8880aee07130 R08: 0000000000000000 R09: ffffffff87676bf8 [ 236.095914] R10: ffffffff87676bd8 R11: ffffffff87676240 R12: ffff8880823b0b90 [ 236.095917] R13: ffff8880823b0b90 R14: ffff8880823b0af8 R15: ffff8880823b0b80 [ 236.095920] FS: 0000000000000000(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 236.095922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.095925] CR2: 0000000001394458 CR3: 000000000766a000 CR4: 00000000001406f0 [ 236.095928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.095931] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.095932] Call Trace: [ 236.095934] [ 236.095936] hhf_dequeue+0x57f/0xa60 [ 236.095938] __qdisc_run+0x2b8/0xe00 [ 236.095940] __dev_queue_xmit+0x1571/0x25e0 [ 236.095942] ? __lock_is_held+0xb6/0x140 [ 236.095945] ? check_preemption_disabled+0x3c/0x250 [ 236.095947] ? netdev_pick_tx+0x300/0x300 [ 236.095949] ? save_trace+0x290/0x290 [ 236.095951] ? br_nf_post_routing+0x27d/0xf00 [ 236.095953] ? br_forward_finish+0x1cc/0x320 [ 236.095955] ? find_held_lock+0x35/0x130 [ 236.095957] ? br_forward_finish+0x1cc/0x320 [ 236.095959] dev_queue_xmit+0x18/0x20 [ 236.095961] ? dev_queue_xmit+0x18/0x20 [ 236.095963] br_dev_queue_push_xmit+0x367/0x530 [ 236.095965] br_forward_finish+0xbc/0x320 [ 236.095967] ? br_dev_queue_push_xmit+0x530/0x530 [ 236.095969] ? br_fdb_add.cold+0x84/0x84 [ 236.095971] __br_forward+0x560/0x9c0 [ 236.095973] ? br_forward_finish+0x320/0x320 [ 236.095975] ? br_dev_queue_push_xmit+0x530/0x530 [ 236.095977] deliver_clone+0x61/0xc0 [ 236.095979] br_flood+0x3c8/0x530 [ 236.095981] br_dev_xmit+0x9a4/0xd40 [ 236.095983] ? check_preemption_disabled+0x3c/0x250 [ 236.095985] ? br_poll_controller+0x10/0x10 [ 236.095988] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.095990] dev_hard_start_xmit+0x18c/0x8b0 [ 236.095992] ? assoc_array_gc+0x11b0/0x11d0 [ 236.095994] __dev_queue_xmit+0x1d95/0x25e0 [ 236.095996] ? trace_hardirqs_on_caller+0x19b/0x590 [ 236.095998] ? ip6t_do_table+0xaa6/0x1860 [ 236.096000] ? netdev_pick_tx+0x300/0x300 [ 236.096002] ? find_held_lock+0x35/0x130 [ 236.096004] ? ip6_finish_output+0x4f4/0xb50 [ 236.096006] ? mark_held_locks+0xb1/0x100 [ 236.096008] dev_queue_xmit+0x18/0x20 [ 236.096010] ? dev_queue_xmit+0x18/0x20 [ 236.096012] ip6_finish_output2+0x10bd/0x21b0 [ 236.096014] ? find_held_lock+0x35/0x130 [ 236.096016] ? ip6_forward_finish+0x480/0x480 [ 236.096018] ? lock_downgrade+0x6e0/0x6e0 [ 236.096020] ip6_finish_output+0x4f4/0xb50 [ 236.096022] ? ip6_finish_output+0x4f4/0xb50 [ 236.096024] ip6_output+0x20f/0x6d0 [ 236.096026] ? ip6_finish_output+0xb50/0xb50 [ 236.096028] ? __lock_is_held+0xb6/0x140 [ 236.096030] ? check_preemption_disabled+0x3c/0x250 [ 236.096032] ? ip6_fragment+0x32c0/0x32c0 [ 236.096035] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.096037] ndisc_send_skb+0xb56/0x11e0 [ 236.096039] ? ndisc_error_report+0x190/0x190 [ 236.096041] ? __ndisc_fill_addr_option+0xf0/0x120 [ 236.096043] ndisc_send_rs+0x129/0x680 [ 236.096045] addrconf_rs_timer+0x289/0x5a0 [ 236.096047] ? __lock_is_held+0xb6/0x140 [ 236.096049] ? check_preemption_disabled+0x3c/0x250 [ 236.096051] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 236.096054] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.096055] call_timer_fn+0x161/0x670 [ 236.096057] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 236.096060] ? __next_timer_interrupt+0x140/0x140 [ 236.096062] ? trace_hardirqs_on_caller+0x19b/0x590 [ 236.096064] run_timer_softirq+0x5b4/0x1570 [ 236.096066] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 236.096067] ? add_timer+0xae0/0xae0 [ 236.096070] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.096072] __do_softirq+0x244/0x9a0 [ 236.096073] ? sched_clock+0x2e/0x50 [ 236.096075] irq_exit+0x160/0x1b0 [ 236.096077] smp_apic_timer_interrupt+0x146/0x5e0 [ 236.096079] apic_timer_interrupt+0x96/0xa0 [ 236.096081] [ 236.096083] RIP: 0010:native_safe_halt+0xe/0x10 [ 236.096085] RSP: 0018:ffffffff87607de8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 236.096090] RAX: 1ffffffff0ee2a84 RBX: ffffffff87676240 RCX: 0000000000000000 [ 236.096093] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff87676abc [ 236.096096] RBP: ffffffff87607e10 R08: 1ffffffff104a601 R09: 0000000000000000 [ 236.096099] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87715410 [ 236.096102] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87676240 [ 236.096104] ? default_idle+0x4c/0x370 [ 236.096106] arch_cpu_idle+0xa/0x10 [ 236.096108] default_idle_call+0x36/0x90 [ 236.096110] do_idle+0x262/0x3d0 [ 236.096112] cpu_startup_entry+0x1b/0x20 [ 236.096114] rest_init+0x1d9/0x1e2 [ 236.096116] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c [ 236.096118] start_kernel+0x6df/0x6fd [ 236.096120] ? mem_encrypt_init+0xb/0xb [ 236.096122] ? x86_family+0x32/0x40 [ 236.096124] ? load_ucode_bsp+0x1ea/0x1f6 [ 236.096126] x86_64_start_reservations+0x29/0x2b [ 236.096128] x86_64_start_kernel+0x77/0x7b [ 236.096130] secondary_startup_64+0xa5/0xb0 [ 236.096131] Code: 00 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 24 <49> 8b 55 08 4c 39 f2 0f 85 aa 00 00 00 41 5c b8 01 00 00 00 41 [ 236.400040] INFO: rcu_sched detected stalls on CPUs/tasks: [ 236.647370] 0-...: (1 GPs behind) idle=e62/1/0 softirq=11742/11750 fqs=5247 [ 236.654627] (detected by 1, t=10502 jiffies, g=1163, c=1162, q=57) [ 236.661032] Sending NMI from CPU 1 to CPUs 0: [ 236.666169] NMI backtrace for cpu 0 [ 236.666172] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.143 #0 [ 236.666176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.666179] task: ffffffff87676240 task.stack: ffffffff87600000 [ 236.666181] RIP: 0010:__list_del_entry_valid+0xb1/0xf5 [ 236.666183] RSP: 0018:ffff8880aee07118 EFLAGS: 00000246 [ 236.666188] RAX: dffffc0000000000 RBX: ffff8880823b0af8 RCX: 0000000000000000 [ 236.666191] RDX: 1ffff11010476173 RSI: ffff8880823b0b90 RDI: ffff8880823b0b98 [ 236.666194] RBP: ffff8880aee07130 R08: 0000000000000000 R09: ffffffff87676bf8 [ 236.666197] R10: ffffffff87676bd8 R11: ffffffff87676240 R12: ffff8880823b0b90 [ 236.666200] R13: ffff8880823b0b90 R14: ffff8880823b0af8 R15: ffff8880823b0b80 [ 236.666203] FS: 0000000000000000(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 236.666205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.666208] CR2: 0000000001394458 CR3: 000000000766a000 CR4: 00000000001406f0 [ 236.666211] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.666214] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.666216] Call Trace: [ 236.666217] [ 236.666219] hhf_dequeue+0x57f/0xa60 [ 236.666221] __qdisc_run+0x2b8/0xe00 [ 236.666223] __dev_queue_xmit+0x1571/0x25e0 [ 236.666225] ? __lock_is_held+0xb6/0x140 [ 236.666227] ? check_preemption_disabled+0x3c/0x250 [ 236.666229] ? netdev_pick_tx+0x300/0x300 [ 236.666231] ? save_trace+0x290/0x290 [ 236.666234] ? br_nf_post_routing+0x27d/0xf00 [ 236.666236] ? br_forward_finish+0x1cc/0x320 [ 236.666238] ? find_held_lock+0x35/0x130 [ 236.666240] ? br_forward_finish+0x1cc/0x320 [ 236.666242] dev_queue_xmit+0x18/0x20 [ 236.666244] ? dev_queue_xmit+0x18/0x20 [ 236.666246] br_dev_queue_push_xmit+0x367/0x530 [ 236.666248] br_forward_finish+0xbc/0x320 [ 236.666250] ? br_dev_queue_push_xmit+0x530/0x530 [ 236.666252] ? br_fdb_add.cold+0x84/0x84 [ 236.666254] __br_forward+0x560/0x9c0 [ 236.666256] ? br_forward_finish+0x320/0x320 [ 236.666258] ? br_dev_queue_push_xmit+0x530/0x530 [ 236.666261] deliver_clone+0x61/0xc0 [ 236.666262] br_flood+0x3c8/0x530 [ 236.666264] br_dev_xmit+0x9a4/0xd40 [ 236.666266] ? check_preemption_disabled+0x3c/0x250 [ 236.666268] ? br_poll_controller+0x10/0x10 [ 236.666271] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.666273] dev_hard_start_xmit+0x18c/0x8b0 [ 236.666275] ? assoc_array_gc+0x11b0/0x11d0 [ 236.666277] __dev_queue_xmit+0x1d95/0x25e0 [ 236.666279] ? trace_hardirqs_on_caller+0x19b/0x590 [ 236.666281] ? ip6t_do_table+0xaa6/0x1860 [ 236.666283] ? netdev_pick_tx+0x300/0x300 [ 236.666286] ? find_held_lock+0x35/0x130 [ 236.666288] ? ip6_finish_output+0x4f4/0xb50 [ 236.666290] ? mark_held_locks+0xb1/0x100 [ 236.666292] dev_queue_xmit+0x18/0x20 [ 236.666294] ? dev_queue_xmit+0x18/0x20 [ 236.666296] ip6_finish_output2+0x10bd/0x21b0 [ 236.666298] ? find_held_lock+0x35/0x130 [ 236.666300] ? ip6_forward_finish+0x480/0x480 [ 236.666302] ? lock_downgrade+0x6e0/0x6e0 [ 236.666305] ip6_finish_output+0x4f4/0xb50 [ 236.666307] ? ip6_finish_output+0x4f4/0xb50 [ 236.666309] ip6_output+0x20f/0x6d0 [ 236.666311] ? ip6_finish_output+0xb50/0xb50 [ 236.666313] ? __lock_is_held+0xb6/0x140 [ 236.666315] ? check_preemption_disabled+0x3c/0x250 [ 236.666317] ? ip6_fragment+0x32c0/0x32c0 [ 236.666319] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.666321] ndisc_send_skb+0xb56/0x11e0 [ 236.666323] ? ndisc_error_report+0x190/0x190 [ 236.666326] ? __ndisc_fill_addr_option+0xf0/0x120 [ 236.666328] ndisc_send_rs+0x129/0x680 [ 236.666330] addrconf_rs_timer+0x289/0x5a0 [ 236.666332] ? __lock_is_held+0xb6/0x140 [ 236.666334] ? check_preemption_disabled+0x3c/0x250 [ 236.666336] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 236.666338] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.666340] call_timer_fn+0x161/0x670 [ 236.666342] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 236.666345] ? __next_timer_interrupt+0x140/0x140 [ 236.666347] ? trace_hardirqs_on_caller+0x19b/0x590 [ 236.666349] run_timer_softirq+0x5b4/0x1570 [ 236.666351] ? ipv6_get_lladdr+0x3e0/0x3e0 [ 236.666353] ? add_timer+0xae0/0xae0 [ 236.666355] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.666357] __do_softirq+0x244/0x9a0 [ 236.666359] ? sched_clock+0x2e/0x50 [ 236.666361] irq_exit+0x160/0x1b0 [ 236.666363] smp_apic_timer_interrupt+0x146/0x5e0 [ 236.666365] apic_timer_interrupt+0x96/0xa0 [ 236.666366] [ 236.666368] RIP: 0010:native_safe_halt+0xe/0x10 [ 236.666370] RSP: 0018:ffffffff87607de8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 236.666375] RAX: 1ffffffff0ee2a84 RBX: ffffffff87676240 RCX: 0000000000000000 [ 236.666378] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff87676abc [ 236.666381] RBP: ffffffff87607e10 R08: 1ffffffff104a601 R09: 0000000000000000 [ 236.666384] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87715410 [ 236.666387] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87676240 [ 236.666389] ? default_idle+0x4c/0x370 [ 236.666390] arch_cpu_idle+0xa/0x10 [ 236.666392] default_idle_call+0x36/0x90 [ 236.666394] do_idle+0x262/0x3d0 [ 236.666396] cpu_startup_entry+0x1b/0x20 [ 236.666398] rest_init+0x1d9/0x1e2 [ 236.666400] ? trace_event_define_fields_x86_irq_vector+0x2c/0x2c [ 236.666402] start_kernel+0x6df/0x6fd [ 236.666404] ? mem_encrypt_init+0xb/0xb [ 236.666406] ? x86_family+0x32/0x40 [ 236.666408] ? load_ucode_bsp+0x1ea/0x1f6 [ 236.666410] x86_64_start_reservations+0x29/0x2b [ 236.666412] x86_64_start_kernel+0x77/0x7b [ 236.666414] secondary_startup_64+0xa5/0xb0 [ 236.666415] Code: 3c 02 00 75 53 49 8b 14 24 4c 39 f2 0f 85 99 00 00 00 49 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 24 49 8b 55 08 4c 39 f2 0f 85 aa 00 00 00 41 5c b8 01 00 00