[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.754498][ T26] audit: type=1800 audit(1568256337.098:25): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.793710][ T26] audit: type=1800 audit(1568256337.098:26): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.837894][ T26] audit: type=1800 audit(1568256337.098:27): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.109' (ECDSA) to the list of known hosts. 2019/09/12 02:45:47 fuzzer started 2019/09/12 02:45:49 dialing manager at 10.128.0.26:41131 2019/09/12 02:45:49 syscalls: 2487 2019/09/12 02:45:49 code coverage: enabled 2019/09/12 02:45:49 comparison tracing: enabled 2019/09/12 02:45:49 extra coverage: extra coverage is not supported by the kernel 2019/09/12 02:45:49 setuid sandbox: enabled 2019/09/12 02:45:49 namespace sandbox: enabled 2019/09/12 02:45:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/12 02:45:49 fault injection: enabled 2019/09/12 02:45:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/12 02:45:49 net packet injection: enabled 2019/09/12 02:45:49 net device setup: enabled 02:48:25 executing program 0: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) msgsnd(0x0, &(0x7f0000000340), 0x8, 0x0) 02:48:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000df4870000000000000bc7000000000000095000000000000003aa5639f6399b398da12682182a2b0b10b0f4ecd04173043793473ccf24397357949a23a6555613deb4980ddcf57e4075cdb1e476c79f815f1e4d407e4335d84babff994c3eb289eb1fd55add434a1f424d0c26c004f362b221020dbec632609497f33"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) syzkaller login: [ 227.192771][ T8720] IPVS: ftp: loaded support on port[0] = 21 [ 227.258207][ T8722] IPVS: ftp: loaded support on port[0] = 21 02:48:25 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, 0x0}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 227.442864][ T8720] chnl_net:caif_netlink_parms(): no params data found [ 227.508213][ T8722] chnl_net:caif_netlink_parms(): no params data found [ 227.548814][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.559368][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.568030][ T8720] device bridge_slave_0 entered promiscuous mode [ 227.593719][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.601082][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.611815][ T8720] device bridge_slave_1 entered promiscuous mode [ 227.628735][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.645791][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.660220][ T8722] device bridge_slave_0 entered promiscuous mode [ 227.683436][ T8726] IPVS: ftp: loaded support on port[0] = 21 02:48:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000440)="c4211959f766baf80cb8f6d8728def66bafc0c66b8000066ef419c0fc7a8902b0000450f2042660f58e367420f43e866400f7e7b1866b827000f00d8480fc72e", 0x40}], 0x215, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 227.698616][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.709207][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.717430][ T8722] device bridge_slave_1 entered promiscuous mode [ 227.736228][ T8720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.788536][ T8720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.815683][ T8722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.840605][ T8722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.911990][ T8722] team0: Port device team_slave_0 added [ 227.933148][ T8722] team0: Port device team_slave_1 added [ 227.950095][ T8720] team0: Port device team_slave_0 added [ 227.974549][ T8728] IPVS: ftp: loaded support on port[0] = 21 02:48:26 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00\x1d\x82\xbfwZ\xe1;\xe0') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x7a) [ 228.026732][ T8722] device hsr_slave_0 entered promiscuous mode [ 228.083994][ T8722] device hsr_slave_1 entered promiscuous mode [ 228.125224][ T8720] team0: Port device team_slave_1 added [ 228.217006][ T8731] IPVS: ftp: loaded support on port[0] = 21 [ 228.237538][ T8726] chnl_net:caif_netlink_parms(): no params data found 02:48:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001a0, 0x0) [ 228.326835][ T8720] device hsr_slave_0 entered promiscuous mode [ 228.394083][ T8720] device hsr_slave_1 entered promiscuous mode [ 228.464173][ T8720] debugfs: Directory 'hsr0' with parent '/' already present! [ 228.549636][ T8733] IPVS: ftp: loaded support on port[0] = 21 [ 228.564626][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.571855][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.583528][ T8726] device bridge_slave_0 entered promiscuous mode [ 228.593241][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.601181][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.610858][ T8726] device bridge_slave_1 entered promiscuous mode [ 228.661112][ T8726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.710047][ T8726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.749395][ T8726] team0: Port device team_slave_0 added [ 228.757676][ T8728] chnl_net:caif_netlink_parms(): no params data found [ 228.811875][ T8726] team0: Port device team_slave_1 added [ 228.896554][ T8726] device hsr_slave_0 entered promiscuous mode [ 228.954201][ T8726] device hsr_slave_1 entered promiscuous mode [ 228.993734][ T8726] debugfs: Directory 'hsr0' with parent '/' already present! [ 229.034330][ T8722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.042263][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 229.071698][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.079227][ T8726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.086956][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.094191][ T8726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.119125][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.126752][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.134787][ T8728] device bridge_slave_0 entered promiscuous mode [ 229.142935][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.150282][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.158505][ T8728] device bridge_slave_1 entered promiscuous mode [ 229.200185][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.216791][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.238727][ T2408] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.258049][ T2408] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.269171][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.278203][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.289125][ T8722] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.297994][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 229.309040][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.320320][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.327730][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.336254][ T8731] device bridge_slave_0 entered promiscuous mode [ 229.353093][ T8720] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.376605][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.385303][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.393103][ T8731] device bridge_slave_1 entered promiscuous mode [ 229.401113][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.410434][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.419019][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.426279][ T8734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.435131][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.443412][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.453089][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.462207][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.470889][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.478302][ T8734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.487898][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.538413][ T8728] team0: Port device team_slave_0 added [ 229.545451][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.554938][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.564928][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.573449][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.581010][ T8734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.588777][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.599157][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.613095][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.622242][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.631183][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.638682][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.653346][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.664281][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.671564][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.680113][ T8733] device bridge_slave_0 entered promiscuous mode [ 229.688586][ T8728] team0: Port device team_slave_1 added [ 229.708299][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.722239][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.730907][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.739569][ T8733] device bridge_slave_1 entered promiscuous mode [ 229.748394][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.757411][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.766079][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.774990][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.784681][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.823277][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.836771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.845705][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.855119][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.864273][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.872797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.881780][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.890908][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.955579][ T8728] device hsr_slave_0 entered promiscuous mode [ 230.014188][ T8728] device hsr_slave_1 entered promiscuous mode [ 230.063872][ T8728] debugfs: Directory 'hsr0' with parent '/' already present! [ 230.072811][ T8731] team0: Port device team_slave_0 added [ 230.085554][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.110614][ T8722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.122286][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.133114][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.142084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.152145][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.160764][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.170715][ T8731] team0: Port device team_slave_1 added [ 230.182357][ T8720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.193936][ T8720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.225041][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.236391][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.245053][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.253628][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.262158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.283959][ T8733] team0: Port device team_slave_0 added [ 230.292162][ T8733] team0: Port device team_slave_1 added [ 230.356771][ T8731] device hsr_slave_0 entered promiscuous mode [ 230.414206][ T8731] device hsr_slave_1 entered promiscuous mode [ 230.453844][ T8731] debugfs: Directory 'hsr0' with parent '/' already present! [ 230.464026][ T8726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.481399][ T8720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.512606][ T8722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.528199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.545960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.586808][ T8726] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.616807][ T8733] device hsr_slave_0 entered promiscuous mode [ 230.654802][ T8733] device hsr_slave_1 entered promiscuous mode [ 230.693811][ T8733] debugfs: Directory 'hsr0' with parent '/' already present! [ 230.755886][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.764994][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.773518][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.780836][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.791856][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.802537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.811523][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.818666][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.826886][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.852324][ T8726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.863223][ T8726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.885879][ T8728] IPv6: erspan0: Failed to add prefix route for address fe80::16; dropping [ 230.909422][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.940003][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 02:48:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001a0, 0x10400003) [ 230.972980][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.011727][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.051219][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.069174][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.096436][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.129036][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.151725][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 02:48:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x400000000000251, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 231.172220][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.180590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.218305][ T8726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.260719][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.312855][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.361926][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.372536][ C0] hrtimer: interrupt took 29206 ns [ 231.392418][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.404126][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:48:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x80) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 231.446559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.461278][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.510989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.518454][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.554236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.563105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.571724][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.580975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.589987][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.597305][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.608111][ T8728] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.658489][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.690172][ T8766] ISOFS: Unable to identify CD-ROM format. [ 231.692472][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.730186][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.746648][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.770815][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.787122][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.816442][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.856054][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.873906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.891485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.957984][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 02:48:30 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x15, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x5, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:30 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, 0x0}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 232.013154][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.021110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 02:48:30 executing program 1: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, 0x0}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 232.106327][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.145464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.192258][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.200441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.219610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.230899][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.244428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.260486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.272357][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 02:48:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) [ 232.299239][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.329628][ T8733] 8021q: adding VLAN 0 to HW filter on device team0 02:48:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x15, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) [ 232.358854][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.370465][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 02:48:30 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x15, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) [ 232.399635][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.409967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.475132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.483285][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.514296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.534396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.569985][ T8728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.594351][ T8728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.636457][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.654601][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.662762][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.694297][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.732348][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.764731][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.785990][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.799019][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.810599][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.818073][ T8738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.832889][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.842313][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.851932][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.866706][ T8738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.875083][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.896056][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.904501][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.913345][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.923744][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.933381][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.947815][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.961135][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.969927][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.979181][ T8738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.011378][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.021764][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.031408][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.040794][ T2978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.054090][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.084932][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.351883][ T8830] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:48:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000440)="c4211959f766baf80cb8f6d8728def66bafc0c66b8000066ef419c0fc7a8902b0000450f2042660f58e367420f43e866400f7e7b1866b827000f00d8480fc72e", 0x40}], 0x215, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:48:31 executing program 1: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001a0, 0x0) 02:48:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3f, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, "bdc840edc220f8e83c0cb83dbdfcb99b3fe72098900fdc09bdcdd0b6f091d3f4"}) 02:48:31 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x15, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:31 executing program 0: pipe2$9p(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="000000a600"}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xffffff88) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x280100, 0x88) 02:48:32 executing program 1: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x15, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 02:48:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000440)="c4211959f766baf80cb8f6d8728def66bafc0c66b8000066ef419c0fc7a8902b0000450f2042660f58e367420f43e866400f7e7b1866b827000f00d8480fc72e", 0x40}], 0x215, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:48:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x15, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:32 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0xa) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) 02:48:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001a0, 0x0) 02:48:32 executing program 1: shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 02:48:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x801c581f, 0x20000001) 02:48:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x15, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000340)='}#*nodevem0\xb7,\x00~\x82\xec\x8b$\x85`\xc4\xeb\x86\xder\xa3\xd1-\xd2a|&\x04\xf3\x9bf\x12#\x80\xb2uI\xd4Z\xe8', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) sendfile(r0, r1, 0x0, 0x80005) 02:48:32 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/86, 0x56}], 0x1) pwrite64(r0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) 02:48:32 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0xa) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) 02:48:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000440)="c4211959f766baf80cb8f6d8728def66bafc0c66b8000066ef419c0fc7a8902b0000450f2042660f58e367420f43e866400f7e7b1866b827000f00d8480fc72e", 0x40}], 0x215, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:48:33 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x15, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:33 executing program 5: listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xffffff88) 02:48:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000000)}], 0x9249249249249e1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr="c0eef71ae7ad3d17f711b032446c42fc", 0x8001, 0x3, 0x0, 0x4, 0x47c0800000000000, 0x9f7}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x7f, 0x0, 0x0, 0x0, 0xf, 0x0, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:48:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:48:33 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB='barrier,nodecompose']) [ 234.894397][ T8913] hfsplus: unable to find HFS+ superblock [ 235.013412][ T8923] hfsplus: unable to find HFS+ superblock [ 235.034547][ T8926] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 02:48:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @empty=[0x28], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:48:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @udp={0x0, 0x8100, 0x8}}}}}, 0x0) 02:48:33 executing program 2: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") unshare(0x24020400) unshare(0x24020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a10, 0x1700) [ 235.287340][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 235.287352][ T26] audit: type=1804 audit(1568256513.628:31): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="memory.events" dev="sda1" ino=16544 res=1 [ 235.461859][ T26] audit: type=1800 audit(1568256513.658:32): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16544 res=0 02:48:33 executing program 1: open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 02:48:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:48:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 02:48:33 executing program 2: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:33 executing program 3: 02:48:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b47888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c", 0x57}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x2) ptrace$cont(0x9, r0, 0x0, 0x0) 02:48:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xff\x00\x00\x92\xc2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc04c5349, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) 02:48:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc058534b, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) 02:48:34 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xff\x00\x00\x92\xc2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x404c534a, &(0x7f0000000200)={0x0, 0x0, 0x20001ff, 'queue1\x00'}) 02:48:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40605346, &(0x7f0000000200)={0x0, 0x0, 0x20001ff, 'queue1\x00'}) 02:48:34 executing program 2: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) 02:48:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [{}, {}], {}, [{}, {}, {}], {0x10, 0x2}}, 0x4c, 0x0) 02:48:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffefffffffffffa}, 0x0, 0x8) r1 = gettid() timer_create(0xfffffffbfffffffe, &(0x7f0000000240)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 02:48:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) listxattr(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 02:48:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\xff\x00\x00\x92\xc2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc04c5349, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) 02:48:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) [ 236.252359][ T9006] ------------[ cut here ]------------ [ 236.258057][ T9006] WARNING: CPU: 1 PID: 9006 at kernel/time/posix-cpu-timers.c:401 posix_cpu_timer_del+0x2f0/0x3b0 [ 236.268640][ T9006] Kernel panic - not syncing: panic_on_warn set ... [ 236.275231][ T9006] CPU: 1 PID: 9006 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 236.284420][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.294481][ T9006] Call Trace: [ 236.297785][ T9006] dump_stack+0x172/0x1f0 02:48:34 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x6, &(0x7f0000c63ffc)="66014ebe", 0x4) [ 236.302132][ T9006] ? posix_cpu_timer_del+0x2e0/0x3b0 [ 236.307429][ T9006] panic+0x2dc/0x755 [ 236.311356][ T9006] ? add_taint.cold+0x16/0x16 [ 236.316040][ T9006] ? printk+0xba/0xed [ 236.320037][ T9006] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 236.325500][ T9006] ? __warn.cold+0x14/0x3c [ 236.329921][ T9006] ? __warn+0xd9/0x1d0 [ 236.333998][ T9006] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 236.339290][ T9006] __warn.cold+0x2f/0x3c [ 236.343541][ T9006] ? report_bug.cold+0x63/0xad [ 236.348313][ T9006] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 236.353610][ T9006] report_bug+0x289/0x300 [ 236.357959][ T9006] do_error_trap+0x11b/0x200 [ 236.362563][ T9006] do_invalid_op+0x37/0x50 [ 236.366979][ T9006] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 236.371411][ T3891] kobject: 'loop5' (00000000a5ed4867): kobject_uevent_env [ 236.372274][ T9006] invalid_op+0x23/0x30 [ 236.384392][ T9006] RIP: 0010:posix_cpu_timer_del+0x2f0/0x3b0 [ 236.387057][ T3891] kobject: 'loop5' (00000000a5ed4867): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 236.390311][ T9006] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 83 bb c8 00 00 00 00 74 16 e8 00 58 0d 00 <0f> 0b e9 87 fe ff ff e8 c4 38 48 00 e9 dd fd ff ff e8 ea 57 0d 00 [ 236.390319][ T9006] RSP: 0018:ffff888056d7fa30 EFLAGS: 00010093 [ 236.390337][ T9006] RAX: ffff888056d76440 RBX: ffff8880a1e5de60 RCX: 1ffff1100adaed9a [ 236.405603][ T3891] kobject: 'loop4' (000000004838e6ee): kobject_uevent_env [ 236.420168][ T9006] RDX: 0000000000000000 RSI: ffffffff8164fe10 RDI: ffff8880a1e5df28 [ 236.420177][ T9006] RBP: ffff888056d7fac0 R08: 0000000000000002 R09: ffff888056d76cd8 [ 236.420185][ T9006] R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: ffff888056cb6400 [ 236.420194][ T9006] R13: 1ffff1100adaff47 R14: ffff888056d7fa98 R15: ffff8880a1e5deb8 [ 236.420223][ T9006] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 236.420242][ T9006] ? lock_acquire+0x190/0x410 [ 236.420254][ T9006] ? thread_cpu_clock_getres+0x90/0x90 [ 236.420273][ T9006] ? thread_cpu_clock_getres+0x90/0x90 [ 236.426906][ T3891] kobject: 'loop4' (000000004838e6ee): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 236.434296][ T9006] exit_itimers+0xdb/0x2e0 [ 236.434318][ T9006] do_exit+0x1980/0x2e60 [ 236.434334][ T9006] ? get_signal+0x392/0x2500 [ 236.434349][ T9006] ? find_held_lock+0x35/0x130 [ 236.434366][ T9006] ? get_signal+0x392/0x2500 [ 236.443404][ T3891] kobject: 'loop1' (000000006af4533f): kobject_uevent_env [ 236.449435][ T9006] ? mm_update_next_owner+0x640/0x640 [ 236.449455][ T9006] ? lock_downgrade+0x920/0x920 [ 236.449472][ T9006] ? _raw_spin_unlock_irq+0x28/0x90 [ 236.449485][ T9006] ? get_signal+0x392/0x2500 [ 236.449503][ T9006] ? _raw_spin_unlock_irq+0x28/0x90 [ 236.458008][ T3891] kobject: 'loop1' (000000006af4533f): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 236.465448][ T9006] do_group_exit+0x135/0x360 [ 236.465467][ T9006] get_signal+0x47c/0x2500 [ 236.465485][ T9006] ? lock_downgrade+0x920/0x920 [ 236.465509][ T9006] do_signal+0x87/0x1700 [ 236.475404][ T3891] kobject: 'loop2' (0000000080865ceb): kobject_uevent_env [ 236.478740][ T9006] ? __kasan_check_read+0x11/0x20 [ 236.478752][ T9006] ? _copy_to_user+0x118/0x160 [ 236.478771][ T9006] ? setup_sigcontext+0x7d0/0x7d0 [ 236.483512][ T3891] kobject: 'loop2' (0000000080865ceb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 236.488897][ T9006] ? exit_to_usermode_loop+0x43/0x380 [ 236.488910][ T9006] ? do_syscall_64+0x65f/0x760 [ 236.488923][ T9006] ? exit_to_usermode_loop+0x43/0x380 [ 236.488939][ T9006] ? lockdep_hardirqs_on+0x418/0x5d0 [ 236.488954][ T9006] ? trace_hardirqs_on+0x67/0x240 [ 236.488973][ T9006] exit_to_usermode_loop+0x286/0x380 [ 236.505615][ T3891] kobject: 'loop2' (0000000080865ceb): kobject_uevent_env [ 236.508954][ T9006] do_syscall_64+0x65f/0x760 [ 236.508975][ T9006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.513259][ T3891] kobject: 'loop2' (0000000080865ceb): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 236.517752][ T9006] RIP: 0033:0x4598e9 [ 236.517766][ T9006] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.517773][ T9006] RSP: 002b:00007f3f7d1f7cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.517790][ T9006] RAX: 0000000000000001 RBX: 000000000075bfd0 RCX: 00000000004598e9 [ 236.517799][ T9006] RDX: 00000000004c679f RSI: 0000000000000081 RDI: 000000000075bfd4 [ 236.517807][ T9006] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 236.517815][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 236.517823][ T9006] R13: 00007ffead6dcdbf R14: 00007f3f7d1f89c0 R15: 000000000075bfd4 [ 236.523757][ T9006] Kernel Offset: disabled [ 236.756745][ T9006] Rebooting in 86400 seconds..