[ 33.520273] audit: type=1800 audit(1556072613.640:33): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 49m8[?25h[?0c. [ 33.548647] audit: type=1800 audit(1556072613.640:34): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.014104] random: sshd: uninitialized urandom read (32 bytes read) [ 37.632416] audit: type=1400 audit(1556072617.750:35): avc: denied { map } for pid=7046 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 37.678012] random: sshd: uninitialized urandom read (32 bytes read) [ 38.366651] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.1.25' (ECDSA) to the list of known hosts. [ 43.985776] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/24 02:23:44 fuzzer started [ 44.180719] audit: type=1400 audit(1556072624.300:36): avc: denied { map } for pid=7055 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 46.314570] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/24 02:23:47 dialing manager at 10.128.0.105:36071 2019/04/24 02:23:47 syscalls: 2434 2019/04/24 02:23:47 code coverage: enabled 2019/04/24 02:23:47 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/24 02:23:47 extra coverage: extra coverage is not supported by the kernel 2019/04/24 02:23:47 setuid sandbox: enabled 2019/04/24 02:23:47 namespace sandbox: enabled 2019/04/24 02:23:47 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/24 02:23:47 fault injection: enabled 2019/04/24 02:23:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/24 02:23:47 net packet injection: enabled 2019/04/24 02:23:47 net device setup: enabled [ 48.468049] random: crng init done 02:25:53 executing program 0: 02:25:53 executing program 5: 02:25:53 executing program 1: 02:25:53 executing program 2: 02:25:53 executing program 3: 02:25:53 executing program 4: [ 173.797323] audit: type=1400 audit(1556072753.910:37): avc: denied { map } for pid=7055 comm="syz-fuzzer" path="/root/syzkaller-shm923824653" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 173.839726] audit: type=1400 audit(1556072753.950:38): avc: denied { map } for pid=7072 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13701 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 174.750211] IPVS: ftp: loaded support on port[0] = 21 [ 175.088508] chnl_net:caif_netlink_parms(): no params data found [ 175.097787] IPVS: ftp: loaded support on port[0] = 21 [ 175.152725] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.159455] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.166667] device bridge_slave_0 entered promiscuous mode [ 175.176347] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.182807] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.189809] device bridge_slave_1 entered promiscuous mode [ 175.216649] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.225943] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.246864] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.254943] IPVS: ftp: loaded support on port[0] = 21 [ 175.260724] team0: Port device team_slave_0 added [ 175.280532] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.287650] team0: Port device team_slave_1 added [ 175.297198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.318722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.367482] chnl_net:caif_netlink_parms(): no params data found [ 175.412553] device hsr_slave_0 entered promiscuous mode [ 175.450526] device hsr_slave_1 entered promiscuous mode [ 175.490739] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 175.505345] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 175.575923] IPVS: ftp: loaded support on port[0] = 21 [ 175.592906] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.599399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.606431] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.612826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.651408] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.657804] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.665133] device bridge_slave_0 entered promiscuous mode [ 175.675227] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.681831] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.688758] device bridge_slave_1 entered promiscuous mode [ 175.702914] chnl_net:caif_netlink_parms(): no params data found [ 175.745500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.755301] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.819101] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.826693] team0: Port device team_slave_0 added [ 175.832774] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.841577] team0: Port device team_slave_1 added [ 175.847334] IPVS: ftp: loaded support on port[0] = 21 [ 175.850637] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.858919] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.866605] device bridge_slave_0 entered promiscuous mode [ 175.873715] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.880177] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.887410] device bridge_slave_1 entered promiscuous mode [ 175.899394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.929846] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.949668] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.959198] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.053273] device hsr_slave_0 entered promiscuous mode [ 176.090619] device hsr_slave_1 entered promiscuous mode [ 176.161143] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.194230] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.212618] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.223524] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.246483] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.254167] team0: Port device team_slave_0 added [ 176.263090] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.270598] team0: Port device team_slave_1 added [ 176.279188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.289793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.311275] IPVS: ftp: loaded support on port[0] = 21 [ 176.324428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.332260] chnl_net:caif_netlink_parms(): no params data found [ 176.393352] device hsr_slave_0 entered promiscuous mode [ 176.430399] device hsr_slave_1 entered promiscuous mode [ 176.483661] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.502469] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.511600] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 176.525964] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.543151] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 176.569800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.577820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.609317] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.616304] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.626602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.656035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.664227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.671980] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.678400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.695851] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.702349] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.709307] device bridge_slave_0 entered promiscuous mode [ 176.732360] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.740369] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.746765] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.753897] device bridge_slave_1 entered promiscuous mode [ 176.761103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.809719] chnl_net:caif_netlink_parms(): no params data found [ 176.818640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.827397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.835473] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.841885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.850821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.859406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.870832] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.879553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.889767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.903243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.911979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.921470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.929173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.936964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.944777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.952477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.970770] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.007889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 177.028171] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.036161] team0: Port device team_slave_0 added [ 177.043503] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.051011] team0: Port device team_slave_1 added [ 177.056627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.064470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.119100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 177.142145] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.158534] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.165350] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.172483] device bridge_slave_0 entered promiscuous mode [ 177.189345] chnl_net:caif_netlink_parms(): no params data found [ 177.207399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.215356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.224430] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 177.230885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.238590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.247609] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.254258] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.261446] device bridge_slave_1 entered promiscuous mode [ 177.299858] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 177.316023] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.382484] device hsr_slave_0 entered promiscuous mode [ 177.420442] device hsr_slave_1 entered promiscuous mode [ 177.482146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.491077] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.508965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.524973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 177.542556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.552053] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.565254] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 177.584781] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.594141] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.600699] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.615506] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.624570] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.632101] device bridge_slave_0 entered promiscuous mode [ 177.638796] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.646226] team0: Port device team_slave_0 added [ 177.652318] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.658777] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.666069] team0: Port device team_slave_1 added [ 177.672487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.679487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.686549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.693498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.703200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.712108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.722099] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.728469] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.736044] device bridge_slave_1 entered promiscuous mode [ 177.745265] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.752716] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.759124] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.767191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.774408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.784525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.792267] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.798665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.806107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.834745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.853915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.864915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.873176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.881407] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.887761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.894830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.902989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.910760] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.917288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.925746] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.935261] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.945180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.958683] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.967389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.975539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.983515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.991442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.999016] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.005420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.012835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.084029] device hsr_slave_0 entered promiscuous mode [ 178.122810] device hsr_slave_1 entered promiscuous mode [ 178.187139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.198915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.208240] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.215780] team0: Port device team_slave_0 added [ 178.223086] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.231209] team0: Port device team_slave_1 added [ 178.236619] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 178.245135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.253310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.264755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.276208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.285080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.293606] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 178.300476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.308225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.316940] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.325763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 02:25:58 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = dup2(r1, r1) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x80800) setsockopt$inet_group_source_req(r2, 0x0, 0x30, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) [ 178.367662] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.378127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.393298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.463014] device hsr_slave_0 entered promiscuous mode [ 178.500393] device hsr_slave_1 entered promiscuous mode [ 178.559527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.568688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.579124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.586781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.594707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 02:25:58 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x3) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) [ 178.603536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.614405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 178.622101] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 178.633273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.654815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.668217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.685892] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.705635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.713658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.726346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.734500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.749757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 178.762423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.777900] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.789818] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.803932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.815951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.825458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.844763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.859660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.868362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.881663] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 178.887741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.899857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 02:25:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, 0x1, {0x7, 0x1d, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, 0x50) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x202, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000140)=""/131, 0x83}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000540)=""/235, 0xeb}, {&(0x7f0000000640)=""/250, 0xfa}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000740)=""/171, 0xab}], 0x6, &(0x7f0000000880)=""/197, 0xc5}, 0x100) [ 178.921498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.929623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.949204] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.976904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.987375] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 178.996666] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.007592] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 179.016512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:25:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x6e7}}, 0xe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x7, 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0702000006000008a99fbc") connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) [ 179.034409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.053555] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.065787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 179.079018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.088510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.098319] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.104743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.112270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.123666] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 179.135133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.157569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.164900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.175748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:25:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@ipv4_getroute={0x1c, 0x1a, 0x414, 0x70bd2a, 0x25dfdbfc, {0x2, 0x14, 0x80, 0x6, 0x0, 0x3, 0xfe, 0x3, 0x1c00}, ["", "", "", "", "", "", "", ""]}, 0x381}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") 02:25:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000180)=0xcc6c, 0x4) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'hwsim0\x00', r3}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000001c0), 0x4) socket$inet_udp(0x2, 0x2, 0x0) [ 179.184381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.201034] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.207532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.218421] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 179.236285] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.245308] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 179.258742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.279514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 02:25:59 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x420000, 0x0) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x21) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000040)=0x2c3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x7, 0x3, 0x2, 0x5, 0xffff, 0x5, 0x7, {0x0, @in6={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffffffffff80}}, 0x3, 0x6, 0xb8, 0x1, 0x800}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000003c0)={r2, 0x7d}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x40}, 0x8) bind$netrom(r0, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @default]}, 0x48) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r3, 0x80000001}, 0x8) [ 179.287506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.300602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 179.311795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.340428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.350314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.358237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.378152] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.384613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.401654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.409627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.429716] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.436162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.445786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.457623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.469885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.477571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.485328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.494800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.504610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.513834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.522591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.530429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.538547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.549165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.558597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.566741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.573720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.583158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.591506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.599195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.607373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.617044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.629199] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 179.637867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 179.645580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.653968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.671095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.678142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.686699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.694486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.705114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 179.714658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 179.722539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.730563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.738106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.745832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.754990] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 179.761449] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.770575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 179.779991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.788034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.796330] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 179.802991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.811073] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 179.817491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.839669] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 179.848744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 179.862638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.873277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.881604] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.887968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.898085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.908045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.914995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.923335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.931766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.939386] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.945799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.955820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.965205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.976209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.986933] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 179.993924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.006194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.014307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.022916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.031231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.041076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.051011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 180.061055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.068821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.076825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.084546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.094038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.105694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 180.113039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.121358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.131223] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 180.137298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.154770] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 180.169412] 8021q: adding VLAN 0 to HW filter on device batadv0 02:26:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:26:01 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x9, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/36, 0x20000024}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0) 02:26:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00', {}, 0x7, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7ff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:26:01 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x8) setsockopt$inet6_dccp_buf(r0, 0x110, 0x3, 0x0, 0x0) 02:26:01 executing program 4: r0 = socket$inet6(0xa, 0x40000000003, 0xff) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0xfffffffffffffeb7) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@local}]}, 0x38}}, 0x0) 02:26:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = getpgrp(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r3, r0}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() mlockall(0x7) ptrace$setopts(0x4206, r4, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in6=@rand_addr="1f5e4c2b2323f3a36af6d83e3ee2e1b4", 0x4e21, 0x9, 0x4e22, 0x800, 0xa, 0x80, 0x80, 0xc, r5, r6}, {0x3f, 0x7, 0xffffffff80000000, 0x5, 0x1fe2, 0x8001, 0x2, 0x7}, {0x8, 0x4, 0x2, 0x1}, 0x1ff, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x3500, 0x6, 0x3, 0x3f, 0x0, 0x5, 0x1}}, 0xe8) tkill(r4, 0x1d) wait4(0x0, 0x0, 0x0, 0x0) 02:26:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="01541f36d5d5afb4d1f5c3dbcb67e4927a1307813bb4b38ae1dfcb84ebce44ba23656513d60e20da64325b37037c98a197956f37133c53601c433ceeb66ceb4482c023fd3ace9228e41bbefb25e823c63da0b3f26c6938f41936afdf0ec66a236384a67c3ffd93aa6a2c30e128aa034c5eeee731e36a4cf0055f3df674ca2e32514b9cc4bdfdf874d258faa4c593463ab734c025c12fe3d0f0fd8a5615b603453ec48aeddc600b7f6e9c7de6a71c0a1333c4", 0xb2, 0x7ff}], 0x80010, &(0x7f0000000340)={[{@dir_umask={'dir_umask', 0x3d, 0x6}}, {@session={'session', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0x2a}}]}) r1 = socket$inet(0x2, 0x80003, 0x51) r2 = socket(0x2, 0xa, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@int=0x1, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000140)=0x3c, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f00000002c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x381}}], 0x6fdaec, 0x22, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000003c0)={[], 0xf4, 0x7, 0xaeb0, 0x80000001, 0xffffffff, r3}) 02:26:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x8, 0x101802) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x1f, 0x7, 0x10001, 0xfc}}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7d, 0x600000000000000, [0xc0000101, 0x0, 0x10a], [0xc2]}) [ 181.180652] input: syz0 as /devices/virtual/input/input5 02:26:01 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) 02:26:01 executing program 4: r0 = socket$inet6(0xa, 0x40000000003, 0xff) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0xfffffffffffffeb7) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@local}]}, 0x38}}, 0x0) 02:26:01 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8501000006000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x6f, &(0x7f0000000140)=""/111, 0x41000, 0x0, [], 0x0, 0x7, 0xffffffffffffff9c, 0x8, &(0x7f00000001c0)={0x20, 0xffffffff}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x9, 0x9}, 0x10}, 0x70) fsync(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x202200, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000300)={0x1, 0x2c6, 0xcd7}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) set_mempolicy(0x3, &(0x7f0000000240)=0x6697, 0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x13) [ 181.264579] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 02:26:01 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5b9, 0xffffffffffffffff, 0x677, 0x8, 0x401}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e23, @broadcast}}, 0x3, 0x101}, 0x90) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) poll(&(0x7f00000000c0)=[{}], 0x1, 0xb8a) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2b) 02:26:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000a59cac777fce082c04c92e8decd63f76898a02031328c11290c9f2cf9178aa6b126506ebe3533e7de4d451360200e01e7d15c285c23c091b89b07f02a703d427"], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xfffffef7, 0x0, &(0x7f0000000000), 0x2f2, 0x0, 0x0}) 02:26:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x0, @time, 0x81, {0x3ff, 0x44d}, 0x4, 0x1, 0x9}) fcntl$getflags(r0, 0x40b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x88800, 0x0) connect(r1, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@local, 0x64, r4}) sendmsg$can_bcm(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0b8b60cdd5d919aaf1ebfe7d07ce1a93c29fddcb6dc56efbb0b21608a0d5f43e0f36d761e1a1d5fe729476017eafcfb99eed1cb8447be0d87f8bcebcba83351c501f72d20549983f564d5b3bb036efc727584882f00085daaeca7a307ddad9c10885d063a24120461857e13c001ec454739a0238ef524697554e27533f0b24a5335a88a796c79fa2de812f5c90134b6ee01746b4eaa7d153e6704dc0f3d29c27173c1328a4782288f1bda69a19e4d81a2583c3484c4851f0274d48c5b74fae53e6174308a591c3c941ecf8be621ad97a0da55d2798e0bd36ea39696e22850798554ee8e8b51d06305a205515c4379dcb9762da4bc32caf1ab0ed0d2025f2595a16c1d7146f10311e1ee9a8837030a3544341a70bd801ca47fa5eeeb4a6f98b2dad516fabafd88eb6d10b08576b27adb595c54491608068e54efe741138e819a98b6297c94930b96ada4540c064a35983", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="7576d3e67e656882b90490000000008100000000000000000000002d0c14c91ef86f03"], 0x48}}, 0x0) recvmmsg(r2, &(0x7f0000007580), 0x0, 0x10001, 0x0) [ 181.344607] hrtimer: interrupt took 25902 ns [ 181.354386] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 02:26:01 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x240, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x81, 0x8) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/40) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x30}, 0x0) 02:26:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000975000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2000000000002) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x2, 0x8, 0x7fff, 'queue1\x00', 0x7fffffff}) [ 181.507026] audit: type=1400 audit(1556072761.620:39): avc: denied { set_context_mgr } for pid=7214 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 181.540538] protocol 88fb is buggy, dev hsr_slave_0 [ 181.545813] protocol 88fb is buggy, dev hsr_slave_1 02:26:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x0, @time, 0x81, {0x3ff, 0x44d}, 0x4, 0x1, 0x9}) fcntl$getflags(r0, 0x40b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x88800, 0x0) connect(r1, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@local, 0x64, r4}) sendmsg$can_bcm(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="7576d3e67e656882b90490000000008100000000000000000000002d0c14c91ef86f03"], 0x48}}, 0x0) recvmmsg(r2, &(0x7f0000007580), 0x0, 0x10001, 0x0) [ 181.562336] binder: 7214:7221 unknown command 1 [ 181.570488] binder: 7214:7221 ioctl c0306201 20012000 returned -22 [ 181.588803] Unknown ioctl 8706 [ 181.623330] Unknown ioctl -2143271653 02:26:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040004,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c02"]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') [ 181.659068] mmap: syz-executor.1 (7236) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 181.771561] audit: type=1400 audit(1556072761.870:40): avc: denied { create } for pid=7240 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 181.841560] protocol 88fb is buggy, dev hsr_slave_0 [ 181.847245] protocol 88fb is buggy, dev hsr_slave_1 02:26:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f00000001c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80002, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x7, 0x6, 0x1, 0x1, 0x1}, 0x8) 02:26:02 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb7, &(0x7f0000000840), &(0x7f0000000880)=0x100ca) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/full\x00', 0x7fffe, 0x0) sendmsg$rds(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000200)=""/136, 0x88}, {&(0x7f00000002c0)=""/171, 0xab}], 0x3, &(0x7f0000000700)=[@rdma_args={0x48, 0x114, 0x1, {{0x648b82e9, 0x1}, {&(0x7f0000000380)=""/155, 0x9b}, &(0x7f0000000500)=[{&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000180)=""/3, 0x3}], 0x2, 0x20, 0xfffffffffffffffd}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000540)=""/186, 0xba}, &(0x7f0000000600), 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000640)=""/120, 0x78}, &(0x7f00000006c0), 0x20}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0xc0}, 0x40080) open(&(0x7f0000000800)='./file0\x00', 0x4000, 0x20) 02:26:02 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10800, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xe507, @mcast1, 0x3}], 0x1c) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040)=0x80, 0x114) 02:26:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008104e00f80ecdb4cb90402c804a012000000040090fb120001000e10da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000002240)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/204, 0xcc}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/34, 0x22}], 0x3, &(0x7f00000002c0)=""/25, 0x19}, 0x7}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000480)=""/139, 0x8b}], 0x2, &(0x7f0000000540)=""/175, 0xaf}, 0x7}, {{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000980)=""/46, 0x2e}], 0x5}, 0x8000}, {{&(0x7f0000000a40)=@ax25={{0x3, @netrom}, [@null, @netrom, @null, @null, @remote, @rose, @rose, @netrom]}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/25, 0x19}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/51, 0x33}, {&(0x7f0000001b80)=""/153, 0x99}, {&(0x7f0000001c40)=""/82, 0x52}, {&(0x7f0000001cc0)=""/17, 0x11}, {&(0x7f0000001d00)=""/21, 0x15}, {&(0x7f0000001d40)=""/119, 0x77}], 0x9, &(0x7f0000001e80)=""/106, 0x6a}, 0xfffffffffffffffc}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001f00)=""/146, 0x92}], 0x1, &(0x7f0000002000)=""/227, 0xe3}}], 0x5, 0x10000, &(0x7f0000002280)={r1, r2+10000000}) accept$packet(0xffffffffffffffff, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002300)=0x14) sendmsg$can_bcm(r3, &(0x7f0000002440)={&(0x7f0000002340)={0x1d, r4}, 0x10, &(0x7f0000002400)={&(0x7f0000002380)={0x5, 0x1, 0x8, {0x77359400}, {0x0, 0x2710}, {0x3, 0x7, 0xb99c, 0x8}, 0x1, @can={{0x2, 0x7ff, 0x3, 0x10000}, 0x4, 0x2, 0x0, 0x0, "9cb13ee9bb1d7b4c"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) [ 181.913314] audit: type=1400 audit(1556072761.920:41): avc: denied { write } for pid=7240 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 182.070917] audit: type=1400 audit(1556072761.930:42): avc: denied { read } for pid=7240 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 182.320411] protocol 88fb is buggy, dev hsr_slave_0 [ 182.320429] protocol 88fb is buggy, dev hsr_slave_0 [ 182.325548] protocol 88fb is buggy, dev hsr_slave_1 [ 182.330618] protocol 88fb is buggy, dev hsr_slave_1 [ 182.640154] protocol 88fb is buggy, dev hsr_slave_0 [ 182.645253] protocol 88fb is buggy, dev hsr_slave_1 02:26:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x80000000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@remote, @loopback, 0x1, 0x3, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @remote]}, 0x1c) msgget(0xffffffffffffffff, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 02:26:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x3, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe3, 0x0, 0x10, 0x10, "489643ee5e53bb2c197b23a9e08a052f73fac537f407f6101db0ed392f74ed3765a2903f50ac94223c7b942afa320721b5cf32be9b2f376f6c8957bc3cb45459", "baf3151cdcab6b35388e46d49e87f88bed8aa80063a42117bc9befd78475b46b", [0xf5, 0x5]}) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0xc) 02:26:03 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='bfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'security.', 'hugetlbfs\x00'}, &(0x7f0000000080)=""/120, 0x78) fchdir(r1) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 02:26:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@local}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40000) sysinfo(&(0x7f0000000080)) 02:26:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x400000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045516, &(0x7f0000000040)=0x368) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0xfffe) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x8) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000000c0)=""/35, &(0x7f0000000100)=0x23) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000240)=@bcast) r2 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) keyctl$clear(0x7, r2) 02:26:03 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffefc) close(r0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) 02:26:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = accept4(r0, &(0x7f0000000280)=@nfc, &(0x7f0000000200)=0x80, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @local}, @in6=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) connect$inet6(r0, &(0x7f0000000140), 0x1c) socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') sendto$inet6(r0, &(0x7f0000000180)="8e", 0x1, 0x10, 0x0, 0x0) sendto$llc(r0, &(0x7f0000000240)='*', 0x1, 0x0, 0x0, 0x0) 02:26:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x20) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)={0x3f}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{}, {0x81, 0x0, 0x0, 0x0, 0x5}], 0x1ff}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x1}]}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r3, @ANYBLOB="000126bd7000fddbdf2501000000080002000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x50) 02:26:03 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x20}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd(0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000580)) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r5, 0x1}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r5, 0x0, 0x2, r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x120) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f00000000c0)=[0x100000001, 0x2616]) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_UIE_OFF(r8, 0x7004) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) fsetxattr$security_evm(r7, &(0x7f0000000380)='security.evm\x00', &(0x7f00000003c0)=@md5={0x1, "3188f298e11eb9dbcf1fa2d50ed55d5a"}, 0x11, 0x3) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x9) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000000340)=0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x2a3}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000004c0)={0x0, 0x3, 0x8001, 0x10000, 0x16, 0x777, 0x2bce, 0xaed1, r9}, 0x20) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000000500)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x4000000000000a4, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0xf0ac, 0x8904) ioctl$RTC_ALM_READ(r10, 0x80247008, &(0x7f0000000180)) [ 183.622645] audit: type=1804 audit(1556072763.740:43): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir611279603/syzkaller.kdSPyA/4/bus" dev="sda1" ino=16572 res=1 02:26:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x40000000000) setsockopt$inet6_mtu(r0, 0x29, 0x18, &(0x7f0000000240), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0xc000) getpeername$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) 02:26:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0x100001) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0xfc, @mcast2, 0x5}, {0xa, 0x4e21, 0x2, @mcast1, 0x8}, 0xffffffffffffffe1, [0x81, 0x401, 0x8001, 0x1a41, 0xe791, 0x3, 0x8, 0x3ff]}, 0x5c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:26:03 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x1000108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x802002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ftruncate(r0, 0x0) 02:26:04 executing program 4: ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) geteuid() inotify_init1(0x80000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/153) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5f94"], 0xa) close(r0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) 02:26:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in=@local}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x40000) sysinfo(&(0x7f0000000080)) 02:26:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) syz_extract_tcp_res(&(0x7f0000000040), 0x2303, 0x7ddb2567) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@dev, 0x0, 0x2}, 0x20) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x30) fcntl$setstatus(r1, 0x4, 0x42802) 02:26:04 executing program 3: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8c642) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mouse(0x0, 0x0, 0x200000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204006902000270f7f8", 0x16}], 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x80, 0x8) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 02:26:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x964}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/89) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400)={0x0, 0x1c9c380}, 0x0) [ 184.078840] audit: type=1804 audit(1556072764.190:44): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir611279603/syzkaller.kdSPyA/5/bus" dev="sda1" ino=16548 res=1 [ 184.212309] FAT-fs (loop3): Directory bread(block 26880) failed [ 184.244198] FAT-fs (loop3): Directory bread(block 26881) failed [ 184.266829] FAT-fs (loop3): Directory bread(block 26882) failed [ 184.289810] FAT-fs (loop3): Directory bread(block 26883) failed [ 184.311396] FAT-fs (loop3): Directory bread(block 26884) failed [ 184.335267] FAT-fs (loop3): Directory bread(block 26885) failed [ 184.345236] FAT-fs (loop3): Directory bread(block 26886) failed 02:26:04 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = socket(0x1b, 0x80000, 0x2) getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:26:04 executing program 4: ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) geteuid() inotify_init1(0x80000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/153) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5f94"], 0xa) close(r0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) 02:26:04 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x6a, "4a95dd", "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"}}, 0x110) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9205, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x7) 02:26:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000340)={0x94}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) [ 184.365212] FAT-fs (loop3): Directory bread(block 26887) failed [ 184.382232] FAT-fs (loop3): Directory bread(block 26888) failed [ 184.389656] FAT-fs (loop3): Directory bread(block 26889) failed 02:26:04 executing program 4: set_mempolicy(0x4002, &(0x7f0000000000)=0x1a, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 02:26:04 executing program 0: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) keyctl$update(0x2, r1, &(0x7f0000001240)="93a3c0e8075f41bfbdc14dcfaf67a985717c795044f568877b1db587b43732e3c33450c47fcce912145e233ff584ba701ff62ea4374c164444a254ae87f1d391fdb68df5b4", 0x45) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000001c0)=0x6, &(0x7f00000012c0)=0x4) r3 = syz_open_procfs(0x0, 0xfffffffffffffffe) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000100)="ef169345deb8c1f9bdd175cc87ed45ff6080abfee73d6c76b14b09a88e9cd9e5e7", 0x21) r4 = inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x80) inotify_rm_watch(r3, r4) keyctl$get_keyring_id(0x0, r1, 0x5308) 02:26:04 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x200000001, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80201, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x1e3b, 0x1f, 0x401, 0x80000000, 0x6, 0x1f}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000), 0x4) 02:26:04 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = socket(0x1b, 0x80000, 0x2) getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:26:04 executing program 2: clone(0x3002001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x22) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @multicast2}, @dev, @mcast2, 0x0, 0x0, 0x0, 0x129}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) 02:26:07 executing program 1: unshare(0x20020000) mount$fuse(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chdir(&(0x7f0000000300)='./file0\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000001400)={0x0, 0xfb, 0x1015, 0x6, 0x9, "f5141585bafd8fb69435b723bd0fbe17", "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"}, 0x1015, 0x2) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f0000000200)='./file0\x00') poll(0x0, 0x29f, 0x4000083) rmdir(&(0x7f0000000180)='./file0\x00') 02:26:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000240)=0xc66, 0x4) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000300)) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/121) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x103000, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) accept$ax25(r2, &(0x7f0000000040)={{}, [@netrom, @rose, @remote, @default, @rose, @null, @netrom, @bcast]}, &(0x7f0000000200)=0xfffffffffffffd9a) 02:26:07 executing program 3: r0 = socket(0x1e, 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x20000000) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}, 0x40000101) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 02:26:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x80) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000002c0)) read$FUSE(r1, 0x0, 0x0) 02:26:07 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x8, 0xffffffff, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x6, 0x0}, &(0x7f0000000440)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r2, 0x2}, 0x8) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) syz_mount_image$minix(&(0x7f00000004c0)='minix\x00', &(0x7f0000000500)='./file0\x00', 0x101, 0x7, &(0x7f0000001780)=[{&(0x7f0000000540)="23f7a9aa41c7bd07d3dbf80f057326b39797ce01ccc486", 0x17, 0x5}, {&(0x7f0000000580)="bd95b7c572c3b1e6341b9b9bfa1520265122fad95b9031524a2040cff83106943b68ea8d17a62f80dbe3389b6d1b44aed230d811cf6e55b25c92dbb581dc4528b581edcf648c7107d1c22fc0160a2871c4ef9af5fe265816ad77", 0x5a, 0x9ab5}, {&(0x7f0000000600)="e0468c2ef5aa", 0x6, 0x7}, {&(0x7f0000000640)="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", 0x1000, 0x7ff}, {&(0x7f0000001640)="1dff8a976ba21a3fe2a823cd335540e875e6ab18adf95072e867f20b1334903c2bdb4f97cbf3c6226ddd68b576498b794d098af0ddbf6e47d5783e6a8808f9427ae21c3e26e62283427d31650827beb5996853669d9114bbba8968d8fcb1a6409f7b52eb30a47dbb6cdc8d04e5f981f1dca315faef583e0d99ee6e53289e", 0x7e, 0x1000000000}, {&(0x7f00000016c0)="e02b6b4e702403", 0x7}, {&(0x7f0000001700)="08bfd53155bbc441416ef4651fb691df0a134d61fc5089c26200ec54803a715575f56057c4f5cfd7dee34a43e9eceedd0e327f56d9e2ea99aeeca342d49f0cb31e84444055e33f45c9a6df5f07fffe163a7e864f74d047db4515c25d639da646306f5da71f034fdf36", 0x69, 0x4}], 0x400, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x80, 0x1de) read$alg(r4, &(0x7f0000001840)=""/246, 0xf6) ioctl$sock_ax25_SIOCDELRT(r3, 0x89e3, &(0x7f00000000c0)={@remote, @netrom, 0x0, [@rose, @netrom, @null, @rose, @remote, @netrom, @remote, @bcast]}) 02:26:07 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:26:07 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0xc05, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioprio_get$uid(0x3, r0) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)) 02:26:07 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x800, 0x0) listen(r1, 0x4) [ 187.481164] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 187.491776] ------------[ cut here ]------------ [ 187.496590] WARNING: CPU: 1 PID: 5 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 187.496677] kobject: 'loop3' (ffff8880a4a76ba0): kobject_uevent_env [ 187.505342] Kernel panic - not syncing: panic_on_warn set ... [ 187.505342] [ 187.505359] CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.113 #3 [ 187.505363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.505389] Workqueue: tipc_send tipc_send_work [ 187.505399] Call Trace: [ 187.505419] dump_stack+0x138/0x19c [ 187.505439] panic+0x1f2/0x438 [ 187.505448] ? add_taint.cold+0x16/0x16 [ 187.505462] ? debug_print_object.cold+0xa7/0xdb [ 187.505475] ? debug_print_object.cold+0xa7/0xdb [ 187.505482] __warn.cold+0x2f/0x34 [ 187.505493] ? ist_end_non_atomic+0x10/0x10 [ 187.505502] ? debug_print_object.cold+0xa7/0xdb [ 187.505511] report_bug+0x216/0x254 [ 187.505522] do_error_trap+0x1bb/0x310 [ 187.505532] ? math_error+0x360/0x360 [ 187.505550] ? vprintk_emit+0x171/0x600 [ 187.505564] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.505576] do_invalid_op+0x1b/0x20 [ 187.505591] invalid_op+0x1b/0x40 [ 187.505600] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 187.505605] RSP: 0018:ffff8880a9cd79d8 EFLAGS: 00010286 [ 187.505613] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 187.505619] RDX: 0000000000000000 RSI: ffffffff866d0860 RDI: ffffed101539af31 [ 187.505624] RBP: ffff8880a9cd7a00 R08: 0000000000000061 R09: ffff8880a9cc2a30 [ 187.505630] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff866cba60 [ 187.505635] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88809fc04f18 [ 187.505654] ? debug_print_object.cold+0xa7/0xdb [ 187.505666] debug_object_assert_init+0x232/0x300 [ 187.505678] ? debug_object_init_on_stack+0x20/0x20 [ 187.505698] del_timer+0x67/0xf0 [ 187.505707] ? trigger_dyntick_cpu.isra.0+0x190/0x190 [ 187.505722] tipc_subscrb_subscrp_delete+0x16a/0x3a0 [ 187.505732] ? trace_hardirqs_on_caller+0x400/0x590 [ 187.505741] ? tipc_subscrb_subscrp_delete+0x3a0/0x3a0 [ 187.505751] tipc_subscrb_release_cb+0x18/0x30 [ 187.505759] tipc_close_conn+0x179/0x210 [ 187.505769] tipc_send_work+0x470/0x5a0 [ 187.505783] ? tipc_close_conn+0x210/0x210 [ 187.505799] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 187.505811] process_one_work+0x868/0x1610 [ 187.505827] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 187.505842] worker_thread+0x5d9/0x1050 [ 187.505863] kthread+0x31c/0x430 [ 187.505871] ? process_one_work+0x1610/0x1610 [ 187.505878] ? kthread_create_on_node+0xd0/0xd0 [ 187.505888] ret_from_fork+0x3a/0x50 [ 187.507014] Kernel Offset: disabled [ 187.748239] Rebooting in 86400 seconds..